sr-dev October 2019

sr-dev@lists.kamailio.org

22 participants
436 discussions

git:5.2:0afa37d0: modules: readme files regenerated - modules ... [skip ci]

by Kamailio Dev

Module: kamailio Branch: 5.2 Commit: 0afa37d08b83a050152bbfec9e8ac764e78fd97a URL: https://github.com/kamailio/kamailio/commit/0afa37d08b83a050152bbfec9e8ac76… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2019-10-09T18:01:29+02:00 modules: readme files regenerated - modules ... [skip ci] --- Modified: src/modules/textopsx/README --- Diff: https://github.com/kamailio/kamailio/commit/0afa37d08b83a050152bbfec9e8ac76… Patch: https://github.com/kamailio/kamailio/commit/0afa37d08b83a050152bbfec9e8ac76… --- diff --git a/src/modules/textopsx/README b/src/modules/textopsx/README index bd0328b446..fdd95cd8e9 100644 --- a/src/modules/textopsx/README +++ b/src/modules/textopsx/README @@ -92,6 +92,10 @@ Chapter 1. Admin Guide routing block configurations. It adds new features similar to the textops module (textops eXtentions). + Note: If you add or remove message parts (header, body etc..) it may be + required to execute msg_apply_changes() from this module if there are + other operations done on the SIP message later on. + 2. Functions 2.1. msg_apply_changes()

5 years, 1 month

git:5.1:a600953c: texopsx: extend docs with a small note about msg_apply_changes()

by Henning Westerholt

Module: kamailio Branch: 5.1 Commit: a600953cef1c1ab9bb4d30f485f51ba9c188f460 URL: https://github.com/kamailio/kamailio/commit/a600953cef1c1ab9bb4d30f485f51ba… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T17:57:23+02:00 texopsx: extend docs with a small note about msg_apply_changes() (cherry picked from commit 899b826bcf2ebe0197fae5766962e0c193c585ec) --- Modified: src/modules/textopsx/doc/textopsx.xml --- Diff: https://github.com/kamailio/kamailio/commit/a600953cef1c1ab9bb4d30f485f51ba… Patch: https://github.com/kamailio/kamailio/commit/a600953cef1c1ab9bb4d30f485f51ba… --- diff --git a/src/modules/textopsx/doc/textopsx.xml b/src/modules/textopsx/doc/textopsx.xml index b7fe0d14a8..1967229ac1 100644 --- a/src/modules/textopsx/doc/textopsx.xml +++ b/src/modules/textopsx/doc/textopsx.xml @@ -37,6 +37,11 @@ in routing block configurations. It adds new features similar to the textops module (textops eXtentions). </para> + <para> + Note: If you add or remove message parts (header, body etc..) it + may be required to execute msg_apply_changes() from this module + if there are other operations done on the SIP message later on. + </para> </section> <xi:include href="functions.xml"/>

5 years, 1 month

git:5.2:698e21f2: texopsx: extend docs with a small note about msg_apply_changes()

by Henning Westerholt

Module: kamailio Branch: 5.2 Commit: 698e21f29b25c432057c4792d8134a4e953efeb9 URL: https://github.com/kamailio/kamailio/commit/698e21f29b25c432057c4792d8134a4… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T17:57:03+02:00 texopsx: extend docs with a small note about msg_apply_changes() (cherry picked from commit 899b826bcf2ebe0197fae5766962e0c193c585ec) --- Modified: src/modules/textopsx/doc/textopsx.xml --- Diff: https://github.com/kamailio/kamailio/commit/698e21f29b25c432057c4792d8134a4… Patch: https://github.com/kamailio/kamailio/commit/698e21f29b25c432057c4792d8134a4… --- diff --git a/src/modules/textopsx/doc/textopsx.xml b/src/modules/textopsx/doc/textopsx.xml index b7fe0d14a8..1967229ac1 100644 --- a/src/modules/textopsx/doc/textopsx.xml +++ b/src/modules/textopsx/doc/textopsx.xml @@ -37,6 +37,11 @@ in routing block configurations. It adds new features similar to the textops module (textops eXtentions). </para> + <para> + Note: If you add or remove message parts (header, body etc..) it + may be required to execute msg_apply_changes() from this module + if there are other operations done on the SIP message later on. + </para> </section> <xi:include href="functions.xml"/>

5 years, 1 month

git:5.2:4006c2cc: modules: readme files regenerated - modules ... [skip ci]

by Kamailio Dev

Module: kamailio Branch: 5.2 Commit: 4006c2cc53818f52a9a3211c3906d5a7c829970e URL: https://github.com/kamailio/kamailio/commit/4006c2cc53818f52a9a3211c3906d5a… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2019-10-09T17:16:26+02:00 modules: readme files regenerated - modules ... [skip ci] --- Modified: src/modules/tls/README --- Diff: https://github.com/kamailio/kamailio/commit/4006c2cc53818f52a9a3211c3906d5a… Patch: https://github.com/kamailio/kamailio/commit/4006c2cc53818f52a9a3211c3906d5a… --- diff --git a/src/modules/tls/README b/src/modules/tls/README index 5a0d9dab1f..d028ca7e45 100644 --- a/src/modules/tls/README +++ b/src/modules/tls/README @@ -1431,12 +1431,12 @@ end The following options are avaialble: * krand - use internal kam_rand() function - * fastrand - use internal fastrand function - * cryptorand - use internal cryptorand (fortuna) function + * fastrand - use internal fastrand (ISAAC) function + * cryptorand - use internal cryptorand (Fortuna) function Note: the krand and fastrand engines are not recommended for use on systems requiring strong security, as they may not generate numbers - with enough randomness. + with enough randomness and are not cryptographically secure. The default value is empty (not set) for libssl v1.0.x or older, and "cryptorand" for libssl v1.1.x or newer.

5 years, 1 month

git:5.3:21e0fba6: tls: add initial seeding to cryptorand generator, as we don't do it in core

by Henning Westerholt

Module: kamailio Branch: 5.3 Commit: 21e0fba6adb9e77e91ea83ed79b13621df556e1e URL: https://github.com/kamailio/kamailio/commit/21e0fba6adb9e77e91ea83ed79b1362… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T16:56:31+02:00 tls: add initial seeding to cryptorand generator, as we don't do it in core - add initial seeding to cryptorand generator initialization to main proces - only as additional fallback in case of no access to system entropy sources - not needed for 5.3 - we do it in here in the core for all processes --- Modified: src/modules/tls/tls_mod.c Modified: src/modules/tls/tls_rand.c Modified: src/modules/tls/tls_rand.h --- Diff: https://github.com/kamailio/kamailio/commit/21e0fba6adb9e77e91ea83ed79b1362… Patch: https://github.com/kamailio/kamailio/commit/21e0fba6adb9e77e91ea83ed79b1362… --- diff --git a/src/modules/tls/tls_mod.c b/src/modules/tls/tls_mod.c index 424fad8a08..eaa9593a31 100644 --- a/src/modules/tls/tls_mod.c +++ b/src/modules/tls/tls_mod.c @@ -567,6 +567,7 @@ int mod_register(char *path, int *dlflags, void *p1, void *p2) #if OPENSSL_VERSION_NUMBER >= 0x10100000L LM_DBG("setting cryptorand random engine\n"); + ksr_cryptorand_seed_init(); RAND_set_rand_method(RAND_ksr_cryptorand_method()); #endif diff --git a/src/modules/tls/tls_rand.c b/src/modules/tls/tls_rand.c index 3cb2e8a712..14c0321c04 100644 --- a/src/modules/tls/tls_rand.c +++ b/src/modules/tls/tls_rand.c @@ -171,4 +171,19 @@ const RAND_METHOD *RAND_ksr_cryptorand_method(void) return &_ksr_cryptorand_method; } +/* seed the generator during startup, internally it will also use system entropy */ +void ksr_cryptorand_seed_init() { + u_int8_t bytes[4]; + unsigned int seed; + + seed = fastrand(); + bytes[0] = (seed >> 24) & 0xFF; + bytes[1] = (seed >> 16) & 0xFF; + bytes[2] = (seed >> 8) & 0xFF; + bytes[3] = seed & 0xFF; + + LM_DBG("seeding cryptorand generator with %u\n", seed); + sr_add_entropy(bytes, 4); +} + #endif /* OPENSSL_VERSION_NUMBER >= 0x10100000L */ diff --git a/src/modules/tls/tls_rand.h b/src/modules/tls/tls_rand.h index c73d36b8d9..2b61e3b2ed 100644 --- a/src/modules/tls/tls_rand.h +++ b/src/modules/tls/tls_rand.h @@ -29,5 +29,7 @@ const RAND_METHOD *RAND_ksr_krand_method(void); const RAND_METHOD *RAND_ksr_fastrand_method(void); const RAND_METHOD *RAND_ksr_cryptorand_method(void); +void ksr_cryptorand_seed_init(); + #endif /* OPENSSL_VERSION_NUMBER >= 0x10100000L */ #endif

5 years, 1 month

git:5.2:4288880c: tls: add initial seeding to cryptorand generator, as we don't do it in core

by Henning Westerholt

Module: kamailio Branch: 5.2 Commit: 4288880cd5a11c255ecf426311033a74a8e292f4 URL: https://github.com/kamailio/kamailio/commit/4288880cd5a11c255ecf426311033a7… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T17:02:03+02:00 tls: add initial seeding to cryptorand generator, as we don't do it in core - add initial seeding to cryptorand generator initialization to main proces - only as additional fallback in case of no access to system entropy sources - not needed for 5.3 - we do it in here in the core for all processes (cherry picked from commit 21e0fba6adb9e77e91ea83ed79b13621df556e1e) --- Modified: src/modules/tls/tls_mod.c Modified: src/modules/tls/tls_rand.c Modified: src/modules/tls/tls_rand.h --- Diff: https://github.com/kamailio/kamailio/commit/4288880cd5a11c255ecf426311033a7… Patch: https://github.com/kamailio/kamailio/commit/4288880cd5a11c255ecf426311033a7… --- diff --git a/src/modules/tls/tls_mod.c b/src/modules/tls/tls_mod.c index 424fad8a08..eaa9593a31 100644 --- a/src/modules/tls/tls_mod.c +++ b/src/modules/tls/tls_mod.c @@ -567,6 +567,7 @@ int mod_register(char *path, int *dlflags, void *p1, void *p2) #if OPENSSL_VERSION_NUMBER >= 0x10100000L LM_DBG("setting cryptorand random engine\n"); + ksr_cryptorand_seed_init(); RAND_set_rand_method(RAND_ksr_cryptorand_method()); #endif diff --git a/src/modules/tls/tls_rand.c b/src/modules/tls/tls_rand.c index 3cb2e8a712..14c0321c04 100644 --- a/src/modules/tls/tls_rand.c +++ b/src/modules/tls/tls_rand.c @@ -171,4 +171,19 @@ const RAND_METHOD *RAND_ksr_cryptorand_method(void) return &_ksr_cryptorand_method; } +/* seed the generator during startup, internally it will also use system entropy */ +void ksr_cryptorand_seed_init() { + u_int8_t bytes[4]; + unsigned int seed; + + seed = fastrand(); + bytes[0] = (seed >> 24) & 0xFF; + bytes[1] = (seed >> 16) & 0xFF; + bytes[2] = (seed >> 8) & 0xFF; + bytes[3] = seed & 0xFF; + + LM_DBG("seeding cryptorand generator with %u\n", seed); + sr_add_entropy(bytes, 4); +} + #endif /* OPENSSL_VERSION_NUMBER >= 0x10100000L */ diff --git a/src/modules/tls/tls_rand.h b/src/modules/tls/tls_rand.h index c73d36b8d9..2b61e3b2ed 100644 --- a/src/modules/tls/tls_rand.h +++ b/src/modules/tls/tls_rand.h @@ -29,5 +29,7 @@ const RAND_METHOD *RAND_ksr_krand_method(void); const RAND_METHOD *RAND_ksr_fastrand_method(void); const RAND_METHOD *RAND_ksr_cryptorand_method(void); +void ksr_cryptorand_seed_init(); + #endif /* OPENSSL_VERSION_NUMBER >= 0x10100000L */ #endif

5 years, 1 month

git:5.2:6170ca3b: tls: small extensions in parameter docs related to PRNG engines

by Henning Westerholt

Module: kamailio Branch: 5.2 Commit: 6170ca3bb3f309bd20061fc7eb747631c405980d URL: https://github.com/kamailio/kamailio/commit/6170ca3bb3f309bd20061fc7eb74763… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T17:01:51+02:00 tls: small extensions in parameter docs related to PRNG engines (cherry picked from commit 6fb06e5f71bdf1b7fc689701a57f543e34836812) --- Modified: src/modules/tls/doc/params.xml --- Diff: https://github.com/kamailio/kamailio/commit/6170ca3bb3f309bd20061fc7eb74763… Patch: https://github.com/kamailio/kamailio/commit/6170ca3bb3f309bd20061fc7eb74763… --- diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml index dc6494c2db..c6ec3b067d 100644 --- a/src/modules/tls/doc/params.xml +++ b/src/modules/tls/doc/params.xml @@ -1258,13 +1258,13 @@ end </para> <itemizedlist> <listitem><para>krand - use internal kam_rand() function</para></listitem> - <listitem><para>fastrand - use internal fastrand function</para></listitem> - <listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem> + <listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem> + <listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem> </itemizedlist> <para> Note: the krand and fastrand engines are not recommended for use on systems requiring strong security, as they may not generate numbers - with enough randomness. + with enough randomness and are not cryptographically secure. </para> <para> The default value is empty (not set) for libssl v1.0.x or older, and

5 years, 1 month

git:5.2:64cdf0df: tls: update name and mailing list in tls_cert.sh script

by Henning Westerholt

Module: kamailio Branch: 5.2 Commit: 64cdf0df255932856abceb650cb4ce543b3cd519 URL: https://github.com/kamailio/kamailio/commit/64cdf0df255932856abceb650cb4ce5… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T16:39:21+02:00 tls: update name and mailing list in tls_cert.sh script (cherry picked from commit 49a78933845f136f8f7caaf7e24e6cdcf206cbb5) --- Modified: src/modules/tls/tls_cert.sh --- Diff: https://github.com/kamailio/kamailio/commit/64cdf0df255932856abceb650cb4ce5… Patch: https://github.com/kamailio/kamailio/commit/64cdf0df255932856abceb650cb4ce5… --- diff --git a/src/modules/tls/tls_cert.sh b/src/modules/tls/tls_cert.sh index 9e1cd7fa3c..dc9ea24380 100755 --- a/src/modules/tls/tls_cert.sh +++ b/src/modules/tls/tls_cert.sh @@ -11,7 +11,7 @@ # Configuration variables ############################################################################# NAME=$MAIN_NAME -if [ -z "$NAME" ] ; then NAME="sip-router"; fi; +if [ -z "$NAME" ] ; then NAME="kamailio"; fi; DEFAULT_DIR="/usr/local/etc/$NAME" DEFAULT_DAYS=365 DEFAULT_INFO="Self-signed certificate for $NAME" @@ -102,7 +102,7 @@ AUTHOR Written by Jan Janak <jan(a)iptel.org> REPORTING BUGS - Report bugs to <sr-dev(a)sip-router.org> + Report bugs to <sr-dev(a)lists.kamailio.org> EOF } #usage

5 years, 1 month

git:5.3:679f2065: tls: update name and mailing list in tls_cert.sh script

by Henning Westerholt

Module: kamailio Branch: 5.3 Commit: 679f20654ebf52855fdaad1d72cd6572dd9f9743 URL: https://github.com/kamailio/kamailio/commit/679f20654ebf52855fdaad1d72cd657… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T16:39:07+02:00 tls: update name and mailing list in tls_cert.sh script (cherry picked from commit 49a78933845f136f8f7caaf7e24e6cdcf206cbb5) --- Modified: src/modules/tls/tls_cert.sh --- Diff: https://github.com/kamailio/kamailio/commit/679f20654ebf52855fdaad1d72cd657… Patch: https://github.com/kamailio/kamailio/commit/679f20654ebf52855fdaad1d72cd657… --- diff --git a/src/modules/tls/tls_cert.sh b/src/modules/tls/tls_cert.sh index 9e1cd7fa3c..dc9ea24380 100755 --- a/src/modules/tls/tls_cert.sh +++ b/src/modules/tls/tls_cert.sh @@ -11,7 +11,7 @@ # Configuration variables ############################################################################# NAME=$MAIN_NAME -if [ -z "$NAME" ] ; then NAME="sip-router"; fi; +if [ -z "$NAME" ] ; then NAME="kamailio"; fi; DEFAULT_DIR="/usr/local/etc/$NAME" DEFAULT_DAYS=365 DEFAULT_INFO="Self-signed certificate for $NAME" @@ -102,7 +102,7 @@ AUTHOR Written by Jan Janak <jan(a)iptel.org> REPORTING BUGS - Report bugs to <sr-dev(a)sip-router.org> + Report bugs to <sr-dev(a)lists.kamailio.org> EOF } #usage

5 years, 1 month

git:5.3:6fb06e5f: tls: small extensions in parameter docs related to PRNG engines

by Henning Westerholt

Module: kamailio Branch: 5.3 Commit: 6fb06e5f71bdf1b7fc689701a57f543e34836812 URL: https://github.com/kamailio/kamailio/commit/6fb06e5f71bdf1b7fc689701a57f543… Author: Henning Westerholt <hw(a)skalatan.de> Committer: Henning Westerholt <hw(a)skalatan.de> Date: 2019-10-09T15:47:05+02:00 tls: small extensions in parameter docs related to PRNG engines --- Modified: src/modules/tls/doc/params.xml --- Diff: https://github.com/kamailio/kamailio/commit/6fb06e5f71bdf1b7fc689701a57f543… Patch: https://github.com/kamailio/kamailio/commit/6fb06e5f71bdf1b7fc689701a57f543… --- diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml index dc6494c2db..c6ec3b067d 100644 --- a/src/modules/tls/doc/params.xml +++ b/src/modules/tls/doc/params.xml @@ -1258,13 +1258,13 @@ end </para> <itemizedlist> <listitem><para>krand - use internal kam_rand() function</para></listitem> - <listitem><para>fastrand - use internal fastrand function</para></listitem> - <listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem> + <listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem> + <listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem> </itemizedlist> <para> Note: the krand and fastrand engines are not recommended for use on systems requiring strong security, as they may not generate numbers - with enough randomness. + with enough randomness and are not cryptographically secure. </para> <para> The default value is empty (not set) for libssl v1.0.x or older, and

5 years, 1 month

← Newer
1
...
26
27
28
29
30
31
32
...
44
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev October 2019