diff options
| author | Russell Bryant <russell@russellbryant.com> | 2008-08-01 18:16:24 +0000 |
|---|---|---|
| committer | Russell Bryant <russell@russellbryant.com> | 2008-08-01 18:16:24 +0000 |
| commit | 58291bcec979c12aa177b47d77dd21b31e690b1c (patch) | |
| tree | 517386774bf6b37ad8eae1fa5f485c379d1f8e34 /CHANGES | |
| parent | 62db05502fd941511eb34a4ca40dbd11ec3094e5 (diff) | |
Merge changes from team/bbryant/keyrotation
This set of changes enhances IAX2 encryption support by adding key rotation
to provide enhanced security. The key used for encryption is rotated right
after the call gets set up, and then again every few minutes. This was
discussed at the last AstriDevCon. For interoperability with older versions
of Asterisk, there is an option that disables key rotation.
(closes issue #13018)
Reported by: bbryant
Patches:
07072008__iax2_key_rotation.diff uploaded by bbryant (license 36)
Tested by: russell, bbryant
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@135158 65c4cc65-6c06-0410-ace0-fbb531ad65f3
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -137,6 +137,10 @@ SIP Changes IAX Changes ----------- * Existing DNS manager lookups extended to check for SRV records. + * IAX2 encryption support has been improved to support periodic key rotation + within a call for enhanced security. The option "keyrotate" has been + provided to disable this functionality to preserve backwards compatibility + with older versions of IAX2 that do not support key rotation. CLI Changes ----------- |