[BUG] pjsua_acc_config::contact_use_src_port = PJ_TRUE incompatible with pjsip_tls_setting::verify_server = PJ_TRUE

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



If an account is created with a SIP/TLS registrar and 
contact_use_src_port set to PJ_TRUE (the default), the hostname of the 
server will be unavailable. If the transport was created with 
verify_server set to PJ_TRUE, all secure connections will fail, because 
there will be no server name to match to the server certificate

The cause is that, if contact_use_src_port is set, 
pjsua_acc_get_uac_addr will call pjsip_endpt_acquire_transport, which 
will call pjsip_tpmgr_acquire_transport, which will create a new 
transport with a NULL tdata. Since the TLS transport gets the server 
name from the first request's tdata, if none is provided, the transport 
will be created without a server name

If contact_use_src_port is not set, the transport will be created as a 
side effect of the SIP state machine, by the first message sent, which 
will have a tdata with a server name set



[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux