[asterisk-bugs] [JIRA] (ASTERISK-25618) res_pjsip: Check for readability of TLS files at startup

Kevin Harwell (JIRA) noreply at issues.asterisk.org
Tue Dec 15 12:13:40 CST 2015


     [ https://issues.asterisk.org/jira/browse/ASTERISK-25618?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kevin Harwell updated ASTERISK-25618:
-------------------------------------

    Target Release Version/s: 13.7.0

> res_pjsip:  Check for readability of TLS files at startup
> ---------------------------------------------------------
>
>                 Key: ASTERISK-25618
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25618
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Resources/res_pjsip
>    Affects Versions: SVN, 13.6.0
>            Reporter: George Joseph
>            Assignee: George Joseph
>            Severity: Minor
>      Target Release: 13.7.0
>
>
> Asterisk passes the tls related file names directly to pjproject without checking that they exist or are readable.  pjproject then doesn't check them until they are actually needed to establish a tls session.  If there's something wrong with them (permissions or missing) you don't know until then.
> So, Asterisk should check that the files exist and are readable during started and should not load a transport or endpoint if the files they reference have an issue.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list