Patch TLS domain logic to allow certless outgoing (UAC) connections.

Fri, 30 Mar 2012 18:55:41 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Fri, 30 Mar 2012 18:55:41 +0200
changeset 416
0bc1d0d1fe3a
parent 415
dd7b2195ce6f
child 417
76ceb617f880

Patch TLS domain logic to allow certless outgoing (UAC) connections.

opensips/opensips.patch file | annotate | diff | comparison | revisions
opensips/opensips.spec file | annotate | diff | comparison | revisions
     1.1 --- a/opensips/opensips.patch	Fri Mar 30 18:53:57 2012 +0200
     1.2 +++ b/opensips/opensips.patch	Fri Mar 30 18:55:41 2012 +0200
     1.3 @@ -194,3 +194,34 @@
     1.4   	return 1;
     1.5   }
     1.6   
     1.7 +Index: tls/tls_init.c
     1.8 +diff -Nau tls/tls_init.c.orig tls/tls_init.c
     1.9 +--- tls/tls_init.c.orig	2012-01-17 13:16:02.000000000 +0100
    1.10 ++++ tls/tls_init.c	2012-03-30 18:34:08.540354386 +0200
    1.11 +@@ -617,7 +617,7 @@
    1.12 + 			d->cert_file = tls_cert_file;
    1.13 + 		}
    1.14 + 		if (load_certificate(d->ctx, d->cert_file) < 0)
    1.15 +-			return -1;
    1.16 ++			LM_WARN("tls[%s:%d] proceeding with no certificate at all!\n", ip_addr2a(&d->addr), d->port);
    1.17 + 	
    1.18 + 		/*
    1.19 + 		* load ca 
    1.20 +@@ -629,7 +629,7 @@
    1.21 + 			d->ca_file = tls_ca_file;
    1.22 + 		}
    1.23 + 		if (d->ca_file && load_ca(d->ctx, d->ca_file) < 0)
    1.24 +-			return -1;
    1.25 ++			LM_WARN("tls[%s:%d] proceeding with no CA at all!\n", ip_addr2a(&d->addr), d->port);
    1.26 + 		d = d->next;
    1.27 + 	}
    1.28 + 
    1.29 +@@ -644,7 +644,7 @@
    1.30 + 			d->pkey_file = tls_pkey_file;
    1.31 + 		}
    1.32 + 		if (load_private_key(d->ctx, d->pkey_file) < 0)
    1.33 +-			return -1;
    1.34 ++			LM_WARN("tls[%s:%d] proceeding with no key at all!\n", ip_addr2a(&d->addr), d->port);
    1.35 + 		d = d->next;
    1.36 + 	}
    1.37 + 	return 0;
     2.1 --- a/opensips/opensips.spec	Fri Mar 30 18:53:57 2012 +0200
     2.2 +++ b/opensips/opensips.spec	Fri Mar 30 18:55:41 2012 +0200
     2.3 @@ -388,6 +388,9 @@
     2.4          -e 's;\(#define MAX_SSL_RETRIES\) 32;\1 1024;' \
     2.5          tls/tls_server.c
     2.6      %{l_shtool} subst \
     2.7 +        -e 's;LM_ERR(\("unable to load\);LM_WARN(\1;g' \
     2.8 +        tls/tls_init.c
     2.9 +    %{l_shtool} subst \
    2.10          -e 's;^\(default_bits[ \t]*=[ \t]*\)2048;\14096;' \
    2.11          etc/tls/ca.conf
    2.12      %{l_shtool} subst \

mercurial