Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optional verification of hostnames in TLS certificates #3078

Open
wants to merge 9 commits into
base: master
Choose a base branch
from
Open

Optional verification of hostnames in TLS certificates #3078

wants to merge 9 commits into from

Commits on May 30, 2023

  1. Add hostname field to sockaddr_union

    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    26b5c29 View commit details
    Browse the repository at this point in the history

  2. hostent2su: copy hostnames into sockaddr_union_struct

    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    50ff9bf View commit details
    Browse the repository at this point in the history

  3. Copy peer hostname from sockaddr_union into tcp_connection 

    This is so that hostnames in TLS certificates can be validated.
    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    080fce6 View commit details
    Browse the repository at this point in the history

  4. tls_openssl: enable certificate hostname validation 

    Based on example from https://wiki.openssl.org/index.php/Hostname_validation
    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    78af591 View commit details
    Browse the repository at this point in the history

  5. SRV lookups: take hostname from original lookup instead of SRV record 

    This is so that TLS certificate validation looks at the correct
hostname instead of the one in the SRV record.
    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    e201c14 View commit details
    Browse the repository at this point in the history

  6. Gate TLS hostname verification behind 'verify_hostname' config param

    @jes
    jes committed May 30, 2023
    Configuration menu
    Copy the full SHA
    dc9862f View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2023

  1. hostent_shm_cpy: copy h_name field

    @jes
    jes committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    2efbf64 View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2023

  1. Merge branch 'OpenSIPS:master' into master

    @jes
    jes authored Aug 22, 2023
    Configuration menu
    Copy the full SHA
    4517e18 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2023

  1. tm: free allocated h_name in hostent

    @jes
    jes committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    0eccdbf View commit details
    Browse the repository at this point in the history