[asterisk-bugs] [Asterisk 0018630]: Ability to specify path to self signed SSL cert CA

[Asterisk Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=18630 
====================================================================== 
Reported By:                uxbod
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18630
Category:                   Resources/res_calendar/NewFeature
Reproducibility:            always
Severity:                   feature
Priority:                   normal
Status:                     new
Asterisk Version:           1.8.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-01-17 05:04 CST
Last Modified:              2011-01-17 05:04 CST
====================================================================== 
Summary:                    Ability to specify path to self signed SSL cert CA
Description: 
When a HTTPS URL points to a server with a self signed cert one receives
the following error message:

[Jan 17 09:23:35] WARNING[27663]: res_calendar_icalendar.c:146
fetch_icalendar: Unable to retrieve iCalendar 'testcal' from
'https://office.test.net/home/teamshare@test.net/Calendar/': Server
certificate verification failed: issuer is not trusted

I believe that if an additional option was added to calendar.conf eg:

[testcal]
type = ical
url =    ; URL to shared calendar (Zimbra example)
user =   ; web username
secret = ; web password
cert   = ; path to cert CA

the CA could then be loaded using:

void ne_ssl_trust_cert (ne_session *session, const ne_ssl_certificate
*cert);

as in example code from
http://linux.die.net/man/3/ne_ssl_trust_default_ca



====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-01-17 05:04 uxbod          New Issue                                    
2011-01-17 05:04 uxbod          Asterisk Version          => 1.8.2           
2011-01-17 05:04 uxbod          Regression                => No              
2011-01-17 05:04 uxbod          SVN Branch (only for SVN checkouts, not tarball
releases) => N/A             
======================================================================