- Add a new tport tag to carry the passphrase
 - Add openSSL password callback function

Minor style fixes by Pekka Pessi.

sofia-sip/tport.h:
* tport_delivered_from_subjects() returns type (su_strlst_t const *)
* Export tport_subject_search()

sofia-sip/tport_tag.h + tport_tag.c:
* Remove TPTAG_TLS_VERIFY_PEER()
  - Depreciated.  Use TPTAG_TLS_VERIFY_POLICY instead.
  - Binary Compatibility is preserved.
* Add TPTAG_TLS_VERIFY_POLICY()
  - tport can verify incoming and/or outgoing connections, using:
    1) Certificate Signatures only - or -
    2) Certificate Signatures and Certificate Subjects
* Add TPTAG_TLS_VERIFY_DEPTH()
  - Restrict certificate chain verification to a set length.
* Add TPTAG_TLS_VERIFY_DATE()
  - Disable notBefore/notAfter checking (application: embedded devices)
* Add TPTAG_TLS_VERIFY_SUBJECTS()
  - Incoming connections must present client certificates with subjects
    that match an item in this list.
  - Intended Use: Proxy Authentication
* Replaced TPTAG_TRUSTED() with TPTAG_X509_SUBJECT()
  - Commented out for future use.
  - Intended Use: SIP User Identities in Server Certificates.
* Add appropriate doxygen documentation.

tport.c
* Add tport_subject_search()
  - Subject can be a hostname, IP Address, or a URI.
  - Valid subject examples include:
      example.com
      alice@example.com
      sip:alice@example.com
      sips:alice@example.com
* tport_by_addrinfo() matches tpn_canon against the subject list
    of reusable TLS connections.

tport_tls.h:
* Add tls_init_secondary()
* Remove tls_init_slave() & tls_init_client()

tport_tls.c:
* tls_verify_cb() supports TPTAG_TLS_VERIFY_DATE()
* tls_post_connection_check() verifies certificate subjects.
* tls_init_secondary()
  - Replaces tls_init_slave(), tls_init_client(), and tls_clone().

tport_type_tls.c:
* Removed erroneous reference to tport_tls_deliver()
* Fix a memory leak caused by duplicate calls to tls_clone().
* Populate the (tport_t *)->tp_subjects field with peer certificate data for
  new secondary connections.

darcs-hash:20090115155045-2152f-aaec406d8e5dbf146949d4d3cbc9f56e201cba46.gz

darcs-hash:20090113222056-db55f-4fe35af762b608d1feeafe58d3b1209d3566408c.gz

darcs-hash:20081127130807-db55f-9819281d8b555d58979ed03afbdb8d025b72b3a2.gz

With this tag, the verification of certificates can be controlled:
0: no verify certificates.
1: on server mode, the certificate returned by client is checked and
   if fail the TLS/SSL handshake is immediately terminated.
1: on client mode, the server certificate is verified and
   if fail the TLS/SSL handshake is immediately terminated.

I added this tag, because I'd like that my application not connected to a
server with a untrusted certificate.

darcs-hash:20081126184231-daa5a-26fe2a4f958d2f931d3f7e9b31bc0426e7250a1f.gz

darcs-hash:20080519155323-db55f-e4cbaae7b342c564b3e805df95a1dc52dfe85e93.gz

Referring reader to Linux sysctls to TPTAG_UDP_RMEM and TPTAG_UDP_WMEM
documentation.

darcs-hash:20080103121127-65a35-023a22e9b715deedfdb7dabb1213d41c4eedc647.gz

darcs-hash:20071001141114-65a35-30b43aa973aac669720d675487146d7822502642.gz

darcs-hash:20070920173622-65a35-344f484ee50de63c28e6e9b82658784672064641.gz

darcs-hash:20070725160533-65a35-c1217c49eab31628bb688cb1ed74e315a2dd8a9e.gz

Original patch by Roman Filonenko was slightly modified and re-recorded by
Pekka Pessi. Now letting environment variables override TPTAG_LOG() or
TPTAG_DUMP().

darcs-hash:20061222155506-a63cf-eb5cf7624c24f7db7fc66cfae29873f97a5fd88f.gz

darcs-hash:20061207003355-8fcfa-e9a956858ce8162313812664271dbcb133c59214.gz

darcs-hash:20061205172738-65a35-6f652d5e4cd9fb2b20d67956866f2508ecccaa1c.gz

Added TPORT_STUN_SERVER().
Having stun server dependencies in <tport_stub_stun.c>.
Moved sigcomp dependencies into <tport_stub_sigcomp.c>.

darcs-hash:20060331154135-88462-90caca9b5511bfdae6efa5d609deee9d03841607.gz

darcs-hash:20060323150631-1b897-2e31bb30c30d24d2e95f1ad7d8247f0b98f8fa44.gz

darcs-hash:20060323132940-1b897-c34f496860b3054c8e34ef926b26a28118f7c935.gz

All public include files installed in ${sofiadir} are now in sofia-sip
subdirectories. They are installed to ${sofiadir}/sofia-sip, too.

${sofiadir} is defined by configure script relative to your ${prefix}, by
default ${sofidir} is ${prefix}/include/sofia-sip-1.11. The default prefix
is /usr/local and ${sofiadir} is /usr/local/include/sofia-sip-1.11. When
using package manager, the ${prefix} is usually /usr and ${sofiadir} is
/usr/include/sofia-sip-1.11.

The public include files should be referenced using sofia-sip path, e.g.,
<sofia-sip/su.h>.

You can either fix your applications to use the new include file names
with the fix-include-sofia-sip sed script found in scripts/ directory, or
add both ${sofiadir} and ${sofiadir}/sofia-sip into your include path,
e.g.,

INCLUDES

darcs-hash:20060214140740-65a35-305973241d6cc2e1ab3fe19359445b839b3c22a8.gz

darcs-hash:20060105174213-65a35-bc59bb7ea6a567653d1fd491d076a422819cc6ca.gz

darcs-hash:20051230122555-65a35-d0fb6fac94046ef2eb177acd74139828df2e66a1.gz

darcs-hash:20051013142609-65a35-ae82bd34717e92d23f57a2f2caab9120cb0c8b3e.gz

darcs-hash:20051013142158-65a35-4e3c78d621d49e3606938941a31987c858d3ffaf.gz

darcs-hash:20050907200052-65a35-f31775554518776b4e5f4d5729ef9f99eae648dc.gz