Module: kamailio
Branch: master
Commit: b5a6e7d7900ab9255ba10bd7aded9e60a9fc3d9e
URL: https://github.com/kamailio/kamailio/commit/b5a6e7d7900ab9255ba10bd7aded9e6…
Author: Piotr Gregor <piotr(a)signalwire.com>
Committer: Piotr Gregor <piotr(a)signalwire.com>
Date: 2021-03-19T12:02:17Z
stirshaken: enhance documentation
---
Modified: src/modules/stirshaken/doc/stirshaken_admin.xml
---
Diff: https://github.com/kamailio/kamailio/commit/b5a6e7d7900ab9255ba10bd7aded9e6…
Patch: https://github.com/kamailio/kamailio/commit/b5a6e7d7900ab9255ba10bd7aded9e6…
---
diff --git a/src/modules/stirshaken/doc/stirshaken_admin.xml b/src/modules/stirshaken/doc/stirshaken_admin.xml
index b4b5ce1e14..a78eed9050 100644
--- a/src/modules/stirshaken/doc/stirshaken_admin.xml
+++ b/src/modules/stirshaken/doc/stirshaken_admin.xml
@@ -193,8 +193,8 @@ modparam("stirshaken", "vs_connect_timeout_s", 10)
<section>
<title><varname>vs_cache_certificates</varname> (int)</title>
<para>
- If set, then certificates caching is turned on. This means that certificates downloaded during call verification
- are cached inside vs_cache_dir, and will be loaded from that cache as long as they are not there for more than vs_cache_expire_s seconds.
+ If set, then certificates caching is turned on. This means that certificates downloaded during call verification with stirshaken_check_identity()
+ are cached inside vs_cache_dir, and will be loaded from that cache as long as they are not there for more than vs_cache_expire_s seconds (see vs_cache_expire_s).
If vs_cache_certificates is set then vs_cache_dir must be set too and pointing to existing directory.
This param has no meaning for calls to stirshaken_check_identity_with_key(key) and stirshaken_check_identity_with_cert(cert).
</para>
@@ -239,6 +239,8 @@ modparam("stirshaken", "vs_cache_dir", "/tmp/cert_cache")
<para>
If vs_cache_certificates is set then cached certificates are saved in vs_cache_dir directory and loaded from there
when needed during a call verification executed with stirshaken_check_identity(), as long as they are not there for more than vs_cache_expire_s seconds.
+ If they are in cache for more than vs_cache_expire_s seconds, then a blocking HTTP(s) call is executed to download a new version of (expired) certificate.
+ If this is successful then old version is removed and new version is saved in cache.
This param has no meaning for calls to stirshaken_check_identity_with_key(key) and stirshaken_check_identity_with_cert(cert).
</para>
<para>
<!-- Kamailio Pull Request Template -->
<!--
IMPORTANT:
- for detailed contributing guidelines, read:
https://github.com/kamailio/kamailio/blob/master/.github/CONTRIBUTING.md
- pull requests must be done to master branch, unless they are backports
of fixes from master branch to a stable branch
- backports to stable branches must be done with 'git cherry-pick -x ...'
- code is contributed under BSD for core and main components (tm, sl, auth, tls)
- code is contributed GPLv2 or a compatible license for the other components
- GPL code is contributed with OpenSSL licensing exception
-->
#### Pre-Submission Checklist
<!-- Go over all points below, and after creating the PR, tick all the checkboxes that apply -->
<!-- All points should be verified, otherwise, read the CONTRIBUTING guidelines from above-->
<!-- If you're unsure about any of these, don't hesitate to ask on sr-dev mailing list -->
- [X ] Commit message has the format required by CONTRIBUTING guide
- [X ] Commits are split per component (core, individual modules, libs, utils, ...)
- [X ] Each component has a single commit (if not, squash them into one commit)
- [X ] No commits to README files for modules (changes must be done to docbook files
in `doc/` subfolder, the README file is autogenerated)
#### Type Of Change
- [X ] Small bug fix (non-breaking change which fixes an issue)
- [X ] New feature (non-breaking change which adds new functionality)
- [ ] Breaking change (fix or feature that would change existing functionality)
#### Checklist:
<!-- Go over all points below, and after creating the PR, tick the checkboxes that apply -->
- [X ] PR should be backported to stable branches
- [X ] Tested changes locally
- [ ] Related to issue #XXXX (replace XXXX with an open issue number)
#### Description
<!-- Describe your changes in detail -->
Now random uuid is generated for empty origid, as stated in documentaion.
You can view, comment on, or merge this pull request online at:
https://github.com/kamailio/kamailio/pull/2683
-- Commit Summary --
* modules: Add stirshaken module
* stirshaken: add doc
* stirshaken: enhance documentation
* stirshaken: handle NULL or empty origid by generating random uuid
-- File Changes --
A src/modules/stirshaken/Makefile (28)
A src/modules/stirshaken/doc/Makefile (4)
A src/modules/stirshaken/doc/stirshaken.xml (42)
A src/modules/stirshaken/doc/stirshaken_admin.xml (470)
A src/modules/stirshaken/stirshaken_mod.c (981)
-- Patch Links --
https://github.com/kamailio/kamailio/pull/2683.patchhttps://github.com/kamailio/kamailio/pull/2683.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2683
<!-- Kamailio Pull Request Template -->
<!--
IMPORTANT:
- for detailed contributing guidelines, read:
https://github.com/kamailio/kamailio/blob/master/.github/CONTRIBUTING.md
- pull requests must be done to master branch, unless they are backports
of fixes from master branch to a stable branch
- backports to stable branches must be done with 'git cherry-pick -x ...'
- code is contributed under BSD for core and main components (tm, sl, auth, tls)
- code is contributed GPLv2 or a compatible license for the other components
- GPL code is contributed with OpenSSL licensing exception
-->
#### Pre-Submission Checklist
<!-- Go over all points below, and after creating the PR, tick all the checkboxes that apply -->
<!-- All points should be verified, otherwise, read the CONTRIBUTING guidelines from above-->
<!-- If you're unsure about any of these, don't hesitate to ask on sr-dev mailing list -->
- [X] Commit message has the format required by CONTRIBUTING guide
- [X] Commits are split per component (core, individual modules, libs, utils, ...)
- [X] Each component has a single commit (if not, squash them into one commit)
- [X] No commits to README files for modules (changes must be done to docbook files
in `doc/` subfolder, the README file is autogenerated)
#### Type Of Change
- [ ] Small bug fix (non-breaking change which fixes an issue)
- [X] New feature (non-breaking change which adds new functionality)
- [ ] Breaking change (fix or feature that would change existing functionality)
#### Checklist:
<!-- Go over all points below, and after creating the PR, tick the checkboxes that apply -->
- [X] PR should be backported to stable branches
- [X] Tested changes locally
- [ ] Related to issue #XXXX (replace XXXX with an open issue number)
#### Description
<!-- Describe your changes in detail -->
This module uses libstirshaken to implement STIR-Shaken authentication and verification functions (STI-AS/VS).
It allows for easy verification of a SIP call containing PASSporT wrapped into SIP Identity Header using a specific certificate,
or a specific key, or by performing complete check on PASSporT including downloading certificate referenced in it's x5u header,
and optionally checking it against trusted root certificates (X509 cert path check). Certificates may be cached and loaded from disk.
Example usage:
loadmodule "stirshaken"
modparam("stirshaken", "as_default_key", "/path/to/key")
modparam("stirshaken", "vs_verify_x509_cert_path", 1)
modparam("stirshaken", "vs_ca_dir", "/path/to/ca")
modparam("stirshaken", "vs_cache_certificates", 1)
modparam("stirshaken", "vs_cache_dir", "/tmp/cert_cache")
modparam("stirshaken", "vs_cache_expire_s", 90)
request_route {
(...)
stirshaken_add_identity("https://sp.com/sp.pem".pem", "B", "+44100", "+44200", "ref");
(...)
request_route {
(...)
stirshaken_check_identity();
(...)
You can view, comment on, or merge this pull request online at:
https://github.com/kamailio/kamailio/pull/2679
-- Commit Summary --
* modules: Add stirshaken module
-- File Changes --
A src/modules/stirshaken/Makefile (28)
A src/modules/stirshaken/stirshaken_mod.c (972)
-- Patch Links --
https://github.com/kamailio/kamailio/pull/2679.patchhttps://github.com/kamailio/kamailio/pull/2679.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2679
Dear Team,
I am using SBC as proxy server and I am using Freeswitch for providing
RBT/MOH. Please guide how can I play RBT from Freeswitch while using SBC as
proxy server.
Thanks & Regards,
Amit Sharma
(Sr. Team Leader)
(An ISO 9001:2008 company)
Mobile: <tel:9891612004> tel:9891612004
PH: +91 120 2595870
Ext.: <tel:870> tel:870
Email : <mailto:amitsharma@coraltele.com> amitsharma(a)coraltele.com
Web : <blocked::http://www.coraltele.com> www.coraltele.com