Module: kamailio
Branch: master
Commit: 242badad1c2176b061cb7595c3e3ff5a469ad1d5
URL: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
Author: Daniel-Constantin Mierla <miconda(a)gmail.com>
Committer: Daniel-Constantin Mierla <miconda(a)gmail.com>
Date: 2021-03-23T09:11:02+01:00
tls: docs for ca_path config option [skip ci]
---
Modified: src/modules/tls/doc/params.xml
---
Diff: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
Patch: https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5…
---
diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 63a964d45c..80dbe2f3cc 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -208,6 +208,32 @@ modparam("tls", "ca_list", "/usr/local/etc/kamailio/ca_list.pem")
</example>
</section>
+ <section id="tls.p.ca_path">
+ <title><varname>ca_path</varname> (str)</title>
+ <para>
+ Sets the path with the trusted CA files, to be given as parameter
+ SSL_CTX_load_verify_locations(). The certificates in ca_path are only
+ looked up when required, e.g. when building the certificate chain
+ or when actually performing the verification of a peer certificate. They
+ are not given to the client (not loaded to be provided to
+ SSL_CTX_set_client_CA_list()), only the ones in ca_list files are sent
+ to the client. It requires to use c_rehash to generate the hash map
+ for certificate search, for more see the manual of libssl for
+ SSL_CTX_load_verify_locations() function.
+ </para>
+ <para>
+ By default it is not set.
+ </para>
+ <example>
+ <title>Set <varname>ca_path</varname> parameter</title>
+ <programlisting>
+...
+modparam("tls", "ca_path", "/usr/local/etc/kamailio/ca")
+...
+ </programlisting>
+ </example>
+ </section>
+
<section id="tls.p.crl">
<title><varname>crl</varname> (string)</title>
<para>
Module: kamailio
Branch: master
Commit: 46dee155ee10a2f11ecfd41b103f92752042c5ec
URL: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
Author: Henning Westerholt <hw(a)skalatan.de>
Committer: Henning Westerholt <hw(a)skalatan.de>
Date: 2021-03-22T19:51:32Z
nathelper: small spelling fixes
---
Modified: src/modules/nathelper/nathelper.c
---
Diff: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
Patch: https://github.com/kamailio/kamailio/commit/46dee155ee10a2f11ecfd41b103f927…
---
diff --git a/src/modules/nathelper/nathelper.c b/src/modules/nathelper/nathelper.c
index b883b52472..baae1dbb6b 100644
--- a/src/modules/nathelper/nathelper.c
+++ b/src/modules/nathelper/nathelper.c
@@ -2139,7 +2139,7 @@ static void nh_timer(unsigned int ticks, void *timer_idx)
else
dst_uri = &c;
- /* determin the destination */
+ /* determine the destination */
if(path.len && (flags & sipping_flag) != 0) {
/* send to first URI in path */
if(get_path_dst_uri(&path, &opt) < 0) {
@@ -2177,7 +2177,7 @@ static void nh_timer(unsigned int ticks, void *timer_idx)
if(curi.port_no == 0)
curi.port_no = SIP_PORT;
proto = curi.proto;
- /* we sholud get rid of this resolve (to ofen and to slow); for the
+ /* we should get rid of this resolve (to often and to slow); for the
* moment we are lucky since the curi is an IP -bogdan */
he = sip_resolvehost(&curi.host, &curi.port_no, &proto);
if(he == NULL) {