GitLab

Ignore-this: f13e52ca85d863d42ab6a2b2dd7afe02

darcs-hash:20090519170318-db55f-f748920bb0f9de38bf0f39873fd66bb8b64a5d97.gz

Ignore-this: ad2466f425534480a4f3073f50e0ea96

Using pthread_once().

darcs-hash:20090519171630-db55f-88f8286c7f1ebf8800ace36f1b2719c1e214f3e5.gz

Ignore-this: 49f502ccaaf771abed1e5b2d00eaa8b8

Coverity issue.

darcs-hash:20090513101456-db55f-37dbbb641401e6561e3fd81dfa184e09de6c0a5e.gz

Ignore-this: a651d5eb213850d9dfd317102a432f8e

Coverity issue.

darcs-hash:20090512182333-db55f-dc6aba55d33b314bcfc4fafbb7658132cc979910.gz

Ignore-this: b39558360afb657325a4615d0919baaa

Coverity issue.

darcs-hash:20090512180433-db55f-7136738d621cc636ecd076344064128337c14933.gz

Ignore-this: 2ffe592459d1e87748010ad1da93b460

darcs-hash:20090429180320-db55f-24b014f2cac18138c59ddc6598fc5607616fa630.gz

Ignore-this: b81c43b73fcefa2dd58dd3366dd60368

darcs-hash:20090311165258-db55f-cef20213633caeb1bff3bc43a6e0ece5c0fbe500.gz

Ignore-this: 463ce3a08bd78c8603f1c345e91f440c

Fixed return value from tport_set_params(), too.

darcs-hash:20090303135630-db55f-1f6f116757fd71c8f0427d012feebdf2b0a5203e.gz

darcs-hash:20090212180248-2152f-c2879950415076a0b089457f0b18af4916a495d9.gz

Ignore-this: 90edf730299a1077636eda57a94e1219

darcs-hash:20090212210226-11237-f39e2196402603e698973e3ee718ce56efe2ac66.gz

Ignore-this: 1cb14a868a4f3dfd7f75188450afeec3

darcs-hash:20090212205611-db55f-044066d39a7f56c19a9c6c1c483c7d267c43a300.gz

Ignore-this: 862cf3e8ef5c17e9ac955dcdba317f1f

darcs-hash:20090212131708-db55f-98e310c1be511851b709363d9a7081431e99103c.gz

Ignore-this: 5d96f6f5d776bf8fb49e221b2f65ca60

darcs-hash:20090212131731-c21f9-3b06d3024bb39835575d29b710dcc9176b1dae3e.gz

Ignore-this: 7b7e2d1cc9f61b41c4d44dc8ff4d246e

darcs-hash:20090211210108-c21f9-65d56056f28ba91d8b3819c986156fde78872f80.gz

sofia-sip/tport.h:
* tport_delivered_from_subjects() returns type (su_strlst_t const *)
* Export tport_subject_search()

sofia-sip/tport_tag.h + tport_tag.c:
* Remove TPTAG_TLS_VERIFY_PEER()
  - Depreciated.  Use TPTAG_TLS_VERIFY_POLICY instead.
  - Binary Compatibility is preserved.
* Add TPTAG_TLS_VERIFY_POLICY()
  - tport can verify incoming and/or outgoing connections, using:
    1) Certificate Signatures only - or -
    2) Certificate Signatures and Certificate Subjects
* Add TPTAG_TLS_VERIFY_DEPTH()
  - Restrict certificate chain verification to a set length.
* Add TPTAG_TLS_VERIFY_DATE()
  - Disable notBefore/notAfter checking (application: embedded devices)
* Add TPTAG_TLS_VERIFY_SUBJECTS()
  - Incoming connections must present client certificates with subjects
    that match an item in this list.
  - Intended Use: Proxy Authentication
* Replaced TPTAG_TRUSTED() with TPTAG_X509_SUBJECT()
  - Commented out for future use.
  - Intended Use: SIP User Identities in Server Certificates.
* Add appropriate doxygen documentation.

tport.c
* Add tport_subject_search()
  - Subject can be a hostname, IP Address, or a URI.
  - Valid subject examples include:
      example.com
      alice@example.com
      sip:alice@example.com
      sips:alice@example.com
* tport_by_addrinfo() matches tpn_canon against the subject list
    of reusable TLS connections.

tport_tls.h:
* Add tls_init_secondary()
* Remove tls_init_slave() & tls_init_client()

tport_tls.c:
* tls_verify_cb() supports TPTAG_TLS_VERIFY_DATE()
* tls_post_connection_check() verifies certificate subjects.
* tls_init_secondary()
  - Replaces tls_init_slave(), tls_init_client(), and tls_clone().

tport_type_tls.c:
* Removed erroneous reference to tport_tls_deliver()
* Fix a memory leak caused by duplicate calls to tls_clone().
* Populate the (tport_t *)->tp_subjects field with peer certificate data for
  new secondary connections.

darcs-hash:20090115155045-2152f-aaec406d8e5dbf146949d4d3cbc9f56e201cba46.gz

Cleaned whitespace, too.

darcs-hash:20090113222239-db55f-da765729f3301a11e60b725c3c4a6986961a0f35.gz

darcs-hash:20090113222056-db55f-4fe35af762b608d1feeafe58d3b1209d3566408c.gz

darcs-hash:20090108210046-db55f-13f932a4808875f335157d843d9612e9e0d447c4.gz

darcs-hash:20090105124324-db55f-7206499cbf52751d10d57e52a395ddf848bb0341.gz

darcs-hash:20090105124304-db55f-5c938df2b78f19e74f533d9c0561c7259db11f5d.gz

darcs-hash:20090105124209-db55f-0cbf1542b76117b8640148025de4320cf216e2b6.gz

tport_type_tls.c:
* tport_tls_accept():
  - Replaces tport_accept for incoming TLS connections.
* tport_tls_connect():
  - Replaces tport_base_connect() for outgoing TLS connections.

tport_tls.c:
* tls_t now use a memory home instead of malloc.
* removed tls_check_hosts()
* tls_connect():
  - Replaces tport_base_connect for TLS connection setup.
  - Completes TLS handshake and verifies peer certificates.
  - Destroys suspect TLS connections before sending/receiving payload.
  - Populates a su_strlst_t with subjects from the peer certificate.

tport.c:
* tport_is_verified()
  - true if peer certificate validated successfully
* tport_delivered_from_subjects()
  - Certificate subjects listed in the peer certificate.

darcs-hash:20081216221937-2152f-3d6b74d411b57c22230e4840fca133da48c86368.gz

- Expose tport_setname() and tport_wakeup() via tport_internal.h
- Add tport_register_secondary() for adding secondaries to a root, and
  to alleviate the need to export tprb_append.

darcs-hash:20081216175826-2152f-1a5680d4ca61ba2405b497cfc12bde3a776bfd64.gz

Original patch by Mike Jerris.

darcs-hash:20081219165102-db55f-92c4ef7068f959f14ae54a3304467e4aa42bd252.gz

Avoid lossage in Win32.

darcs-hash:20081128150001-5c5fb-24db2448a46b583845a6166bdd629124c1cce350.gz

darcs-hash:20081128145931-5c5fb-4d5fbbf2b48b37795b60f64cb478236e6cfbe071.gz

darcs-hash:20081127232616-db55f-097634866413808c7359abbe420e8ad5893d9ad3.gz

darcs-hash:20081127232615-db55f-3d4e1b7f47170e77c79e97d27d9468de4d3cab27.gz

darcs-hash:20081127231012-db55f-4f133ffe7be8948003b93c7dd8200890ca7231c0.gz

darcs-hash:20081127130820-db55f-191ef5d48d7cef98440277b781ff90b458d8f8c1.gz

darcs-hash:20081127130818-db55f-f1bbd210f7f4665895b7d3837d52fef49c1dd1b3.gz

darcs-hash:20081127130817-db55f-cbe35bbc252c878548be4379e4ef9402c913dbf1.gz

darcs-hash:20081127130816-db55f-609f9302ce62de27b61394f177215a1de8b2a25a.gz

darcs-hash:20081127130814-db55f-cb5f235dba1f85b2e828527a0bfe2613348c1238.gz

darcs-hash:20081127130813-db55f-f8789d010e6c86e97b9ba56afaea5c54f49d9662.gz

darcs-hash:20081127130812-db55f-897d917911d8e6a1abf34fa3eb6a0811b17a4b22.gz

darcs-hash:20081127130810-db55f-2e26715824d8710e99de0da3bed8cc2b12628d28.gz

darcs-hash:20081127130809-db55f-8b24dcf258893fe7e6e4ab064418968d36c6e94b.gz

darcs-hash:20081127130807-db55f-9819281d8b555d58979ed03afbdb8d025b72b3a2.gz

darcs-hash:20081127130806-db55f-d03497c450cf1d17e475822aa0536f08ff38db23.gz