mirror of
https://github.com/asterisk/asterisk.git
synced 2026-05-04 20:33:53 +00:00
5fbed5af24
Added a new configuration option for PJSIP endpoints - stir_shaken. If set to yes, then STIR/SHAKEN support will be added to inbound and outbound INVITEs. The default is no. Alembic has been updated to include this option. Previously the dialplan function was not trimming the whitespace from the parameters it recieved. Now it does. Also added a conditional that, when TEST_FRAMEWORK is enabled, the timestamp in the identity header will be overlooked. This is just for testing, since the testsuite will rely on a SIPp scenario with a preset identity header to trigger the MISMATCH result. Change-Id: I43d67f1489b8c1c5729ed3ca8d71e35ddf438df1
62 lines
1.6 KiB
Plaintext
62 lines
1.6 KiB
Plaintext
;
|
|
; This file is used by the res_stir_shaken module to configure parameters
|
|
; used for STIR/SHAKEN.
|
|
;
|
|
;
|
|
; [general]
|
|
;
|
|
; File path to the certificate authority certificate
|
|
;ca_file=/etc/asterisk/stir/ca.crt
|
|
;
|
|
; File path to a chain of trust
|
|
;ca_path=/etc/asterisk/stir/ca
|
|
;
|
|
; Maximum size to use for caching public keys
|
|
;cache_max_size=1000
|
|
;
|
|
; Maximum time (in seconds) to wait to CURL certificates
|
|
;curl_timeout=2
|
|
;
|
|
; Amount of time (in seconds) a signature is valid for
|
|
;signature_timeout=15
|
|
;
|
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
;
|
|
; A certificate store is used to examine, and load all certificates found in a
|
|
; given directory. When using this type the public key URL is generated based
|
|
; upon the filename, and variable substitution.
|
|
;[certificates]
|
|
;
|
|
; type must be "store"
|
|
;type=store
|
|
;
|
|
; Path to a directory containing certificates
|
|
;path=/etc/asterisk/stir
|
|
;
|
|
; URL to the public key(s). Must contain variable '${CERTIFICATE}' used for
|
|
; substitution
|
|
;public_key_url=http://mycompany.com/${CERTIFICATE}.pub
|
|
;
|
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
;
|
|
; Individual certificates are declared by using the certificate type.
|
|
;[alice]
|
|
;
|
|
; type must be "certificate"
|
|
;type=certificate
|
|
;
|
|
; File path to a certificate
|
|
;path=/etc/asterisk/stir/alice.crt
|
|
;
|
|
; URL to the public key
|
|
;public_key_url=http://mycompany.com/alice.pub
|
|
;
|
|
; The caller ID number to match on
|
|
;caller_id_number=1234567
|
|
;
|
|
; Must have an attestation of A, B, or C
|
|
;attestation=C
|
|
;
|
|
; The origination identifier for the certificate
|
|
;origid=MyAsterisk
|