Pre-Submission Checklist

[ x] Commit message has the format required by CONTRIBUTING guide
[ x] Commits are split per component (core, individual modules, libs, utils, ...)
[ x] Each component has a single commit (if not, squash them into one commit)
[ x] No commits to README files for modules (changes must be done to docbook files
in doc/ subfolder, the README file is autogenerated)

Type Of Change

Small bug fix (non-breaking change which fixes an issue)
[ x] New feature (non-breaking change which adds new functionality)
Breaking change (fix or feature that would change existing functionality)

Checklist:

[ x] PR should be backported to stable branches
[ x] Tested changes locally
Related to issue #XXXX (replace XXXX with an open issue number)

Description

This module uses libstirshaken to implement STIR-Shaken authentication and verification functions (STI-AS/VS).
It allows for easy verification of a SIP call containing PASSporT wrapped into SIP Identity Header using a specific certificate,
or a specific key, or by performing complete check on PASSporT including downloading certificate referenced in it's x5u header,
and optionally checking it against trusted root certificates (X509 cert path check). Certificates may be cached and loaded from disk.

Example usage:

loadmodule "stirshaken"
modparam("stirshaken", "as_default_key", "/path/to/key")

modparam("stirshaken", "vs_verify_x509_cert_path", 1)
modparam("stirshaken", "vs_ca_dir", "/path/to/ca")
modparam("stirshaken", "vs_cache_certificates", 1)
modparam("stirshaken", "vs_cache_dir", "/tmp/cert_cache")
modparam("stirshaken", "vs_cache_expire_s", 90)

request_route {
(...)
stirshaken_add_identity("https://sp.com/sp.pem", "B", "+44100", "+44200", "ref");
(...)

request_route {
(...)
stirshaken_check_identity();
(...)

You can view, comment on, or merge this pull request online at:

https://github.com/kamailio/kamailio/pull/2678

Commit Summary

modules: Add stirshaken module

File Changes

A src/modules/stirshaken/Makefile (28)
A src/modules/stirshaken/stirshaken_mod.c (972)

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.