[asterisk-bugs] [Asterisk 0013285]: New config parameter to enforce encryption

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13285 
====================================================================== 
Reported By:                sgofferj
Assigned To:                dvossel
====================================================================== 
Project:                    Asterisk
Issue ID:                   13285
Category:                   Channels/chan_iax2
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     closed
Asterisk Version:           SVN 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             2008-08-11 12:02 CDT
Last Modified:              2009-02-12 15:34 CST
====================================================================== 
Summary:                    New config parameter to enforce encryption
Description: 
Currently, Asterisk does not indicate in any way if an IAX connection is
really encrypted. Even the (E) in iax2 show peers only indicates the
configured capability.
In sensitive environments it is imperative to know if a call is actually
encrypted.

Therefore I'd like to suggest a new directive per peer for iax.conf:
forceencryption=(yes|no)
The directive will cause a call not to be set up (=fail) if not both sides
agree on encryption.


======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0013284 New application to indicate if a call i...
====================================================================== 

---------------------------------------------------------------------- 
 (0100061) svnbot (reporter) - 2009-02-12 15:34
 http://bugs.digium.com/view.php?id=13285#c100061 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 175367

_U  branches/1.6.1/

------------------------------------------------------------------------
r175367 | dvossel | 2009-02-12 15:34:07 -0600 (Thu, 12 Feb 2009) | 15
lines

Blocked revisions 175344 via svnmerge

........
  r175344 | dvossel | 2009-02-12 15:27:11 -0600 (Thu, 12 Feb 2009) | 10
lines
  
  Adds force encryption option to iax.conf
  
  This patch adds forceencryption=yes as an iax.conf option.  When force
encryption is enabled, no unencrypted connections are allowed.  This
insures all connections are encrypted.  This is a new feature, so CHANGES
and iax.conf.sample are updated as well.   
  
  (closes issue http://bugs.digium.com/view.php?id=13285)
  Reported by: sgofferj
  Tested by: russell
  Review: http://reviewboard.digium.com/r/150/
........

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=175367 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-02-12 15:34 svnbot         Checkin                                      
2009-02-12 15:34 svnbot         Note Added: 0100061                          
======================================================================