Philippe Sultan
2007-Jun-18 15:11 UTC
[asterisk-users] res_jabber over OpenSSL ready for testing
Hi everybody, I'd like to have the feedback from the community regarding this patch : http://bugs.digium.com/view.php?id=9972 res_jabber currently relies on the iksemel API to handle TLS connections, which assumes GnuTLS to be installed on the system. The basic idea of the proposed modifications is to bypass iksemel's API when sending/receiving TLS secured data and use OpenSSL instead. What you'll need on your system : - OpenSSL installed (tested version 0.9.8b) ; - iksemel installed (tested version 1.2), with or without GnuTLS. I was able to have this patched res_jabber working with Google's Jabber server (TLS required), as well as with our jabberd2 server (with or without TLS) at INRIA. On reason why we should consider moving to OpenSSL is because other modules in Asterisk use it to secure connections. Also, the iksemel API does not deal with TLS connections properly, which leads res_jabber to misbehave when TLS is activated (for example, see bug #9738 : http://bugs.digium.com/view.php?id=9738). Note : the proposed patch applies to the SVN trunk branch. Thanks for your help! Philippe