Module: kamailio
Branch: master
Commit: 242badad1c2176b061cb7595c3e3ff5a469ad1d5
URL: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
Author: Daniel-Constantin Mierla <miconda(a)gmail.com>
Committer: Daniel-Constantin Mierla <miconda(a)gmail.com>
Date: 2021-03-23T09:11:02+01:00
tls: docs for ca_path config option [skip ci]
---
Modified: src/modules/tls/doc/params.xml
---
Diff: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
Patch: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
---
diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 63a964d45c..80dbe2f3cc 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -208,6 +208,32 @@ modparam("tls", "ca_list", "/usr/local/etc/kamailio/ca_list.pem")
</example>
</section>
+ <section id="tls.p.ca_path">
+ <title><varname>ca_path</varname> (str)</title>
+ <para>
+ Sets the path with the trusted CA files, to be given as parameter
+ SSL_CTX_load_verify_locations(). The certificates in ca_path are only
+ looked up when required, e.g. when building the certificate chain
+ or when actually performing the verification of a peer certificate. They
+ are not given to the client (not loaded to be provided to
+ SSL_CTX_set_client_CA_list()), only the ones in ca_list files are sent
+ to the client. It requires to use c_rehash to generate the hash map
+ for certificate search, for more see the manual of libssl for
+ SSL_CTX_load_verify_locations() function.
+ </para>
+ <para>
+ By default it is not set.
+ </para>
+ <example>
+ <title>Set <varname>ca_path</varname> parameter</title>
+ <programlisting>
+...
+modparam("tls", "ca_path", "/usr/local/etc/kamailio/ca")
+...
+ </programlisting>
+ </example>
+ </section>
+
<section id="tls.p.crl">
<title><varname>crl</varname> (string)</title>
<para>
Module: kamailio
Branch: master
Commit: 46dee155ee10a2f11ecfd41b103f92752042c5ec
URL: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
Author: Henning Westerholt <hw(a)skalatan.de>
Committer: Henning Westerholt <hw(a)skalatan.de>
Date: 2021-03-22T19:51:32Z
nathelper: small spelling fixes
---
Modified: src/modules/nathelper/nathelper.c
---
Diff: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
Patch: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
---
diff --git a/src/modules/nathelper/nathelper.c b/src/modules/nathelper/nathelper.c
index b883b52472..baae1dbb6b 100644
--- a/src/modules/nathelper/nathelper.c
+++ b/src/modules/nathelper/nathelper.c
@@ -2139,7 +2139,7 @@ static void nh_timer(unsigned int ticks, void *timer_idx)
else
dst_uri = &c;
- /* determin the destination */
+ /* determine the destination */
if(path.len && (flags & sipping_flag) != 0) {
/* send to first URI in path */
if(get_path_dst_uri(&path, &opt) < 0) {
@@ -2177,7 +2177,7 @@ static void nh_timer(unsigned int ticks, void *timer_idx)
if(curi.port_no == 0)
curi.port_no = SIP_PORT;
proto = curi.proto;
- /* we sholud get rid of this resolve (to ofen and to slow); for the
+ /* we should get rid of this resolve (to often and to slow); for the
* moment we are lucky since the curi is an IP -bogdan */
he = sip_resolvehost(&curi.host, &curi.port_no, &proto);
if(he == NULL) {
Hello,
this is the notification to let everybody know that the development of
Kamailio v5.5.x series will be frozen at the end of March 31, 2021.
Should anyone plan to add new features/modules and be part of v5.5.x,
then they must be committed to git master branch or a pull request
created by that date.
Afterwards, the new features will have to be hold for a few weeks till
branch 5.5 is created and development branch unfrozen, and they will be
part of the next future release v5.6.x (or other version number to be
decided later).
Cheers,
Daniel
--
Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla