[asterisk-bugs] [Asterisk 0018630]: Ability to specify path to self signed SSL cert CA

[Asterisk Bug Tracker]

The following issue has been CLOSED 
====================================================================== 
https://issues.asterisk.org/view.php?id=18630 
====================================================================== 
Reported By:                uxbod
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18630
Category:                   Resources/res_calendar/NewFeature
Reproducibility:            always
Severity:                   feature
Priority:                   normal
Status:                     closed
Asterisk Version:           1.8.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             2011-01-17 05:04 CST
Last Modified:              2011-01-17 09:02 CST
====================================================================== 
Summary:                    Ability to specify path to self signed SSL cert CA
Description: 
When a HTTPS URL points to a server with a self signed cert one receives
the following error message:

[Jan 17 09:23:35] WARNING[27663]: res_calendar_icalendar.c:146
fetch_icalendar: Unable to retrieve iCalendar 'testcal' from
'https://office.test.net/home/teamshare@test.net/Calendar/': Server
certificate verification failed: issuer is not trusted

I believe that if an additional option was added to calendar.conf eg:

[testcal]
type = ical
url =    ; URL to shared calendar (Zimbra example)
user =   ; web username
secret = ; web password
cert   = ; path to cert CA

the CA could then be loaded using:

void ne_ssl_trust_cert (ne_session *session, const ne_ssl_certificate
*cert);

as in example code from
http://linux.die.net/man/3/ne_ssl_trust_default_ca



====================================================================== 

---------------------------------------------------------------------- 
 (0130559) lmadsen (administrator) - 2011-01-17 09:02
 https://issues.asterisk.org/view.php?id=18630#c130559 
---------------------------------------------------------------------- 
While I agree this would be a great feature, we can't track feature
requests on the issue tracker without submitted code. Please bring this up
as a discussion point on the #asterisk-dev mailing list. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-01-17 09:02 lmadsen        Note Added: 0130559                          
2011-01-17 09:02 lmadsen        Status                   new => closed       
======================================================================