Ensure Asterisk fails TCP/TLS SIP calls when certificate checking fails
authorKinsey Moore <kmoore@digium.com>
Wed, 17 Oct 2012 19:01:27 +0000 (19:01 +0000)
committerKinsey Moore <kmoore@digium.com>
Wed, 17 Oct 2012 19:01:27 +0000 (19:01 +0000)
commit372e29620c4b0b1db59bc7b96637e54479a76696
treec4a65b659e4622f8452b402edb4ad57c644ff617
parent6d57ecd48c2efa36973ebcf204ffed0ed8a39580
Ensure Asterisk fails TCP/TLS SIP calls when certificate checking fails

When placing a call to a TCP/TLS SIP endpoint whose certificate is not
signed by a configured CA certificate, Asterisk would issue a warning
and continue to process the call as if there was not an issue with the
certificate.  Asterisk now properly fails the call if the certificate
fails verification or if the certificate does not exist when
certificate checking is enabled (the default behavior).

(closes issue ASTERISK-20559)
Reported by: kmoore

Review: https://reviewboard.asterisk.org/r/2163/
........

Merged revisions 375146 from http://svn.asterisk.org/svn/asterisk/branches/1.8
........

Merged revisions 375147 from http://svn.asterisk.org/svn/asterisk/branches/10
........

Merged revisions 375148 from http://svn.asterisk.org/svn/asterisk/branches/11

git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@375149 65c4cc65-6c06-0410-ace0-fbb531ad65f3
main/tcptls.c