[asterisk-bugs] [JIRA] (ASTERISK-26303) [patch] BuildSystem: ca_list_path capabilities not detected in PJProject.

[Alexander Traud (JIRA)]

Alexander Traud created ASTERISK-26303:
------------------------------------------

             Summary: [patch] BuildSystem: ca_list_path capabilities not detected in PJProject.
                 Key: ASTERISK-26303
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26303
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Core/BuildSystem
    Affects Versions: 13.10.0
            Reporter: Alexander Traud
            Severity: Minor


Since Asterisk 13.2 ([issue report 24575|https://issues.asterisk.org/jira/browse/ASTERISK-24575]), one can list the trusted Certificate Authorities not just as a single file but via a path {{ca_list_path}} in the configuration file {{pjsip.conf}}. This required the new function {{pj_ssl_cert_load_from_files2}} in PJProject ([change set 4973|https://trac.pjsip.org/repos/changeset/4973]). Availability of this function is detected via the Asterisk build system. Since Asterisk 13.8 ([code review 2200|https://gerrit.asterisk.org/2200]), this detection is broken, if not the bundled PJProject is used. Consequently, {{ca_list_path}} cannot be used currently.

*Steps to Reproduce*, for example in Ubuntu 16.04 LTS
{noformat}sudo apt install libssl-dev libncurses-dev libnewt-dev libxml2-dev libsqlite3-dev uuid-dev libjansson-dev libblocksruntime-dev
wget github.com/pjsip/pjproject/archive/master.tar.gz
tar zxf master.tar.gz
cd ./pjproject*
CFLAGS='-DNDEBUG -DPJ_HAS_IPV6=1' ./configure --prefix=/usr --enable-shared --enable-epoll
make
sudo make install
cd ../
wget downloads.asterisk.org/pub/telephony/asterisk/asterisk-13-current.tar.gz
tar zxf asterisk*.tar.gz
cd ./asterisk*
./configure
make
sudo make install{noformat}
edit {{/etc/asterisk/pjsip.conf}}:{noformat}
[transport]
type = transport
protocol = tls
bind = 0.0.0.0
ca_list_path = /etc/ssl/certs
…{noformat}

*Expected Results*
Asterisk should start without any error message.

*Actual Results*
‘Asterisk has been built against a version of pjproject that does not support the 'ca_list_path' option. Please upgrade to version 2.4 or later.’ And {{./configure}} gave: ‘checking for pjsip/include/pjsip/sip_util.h in -lpj no’.



--
This message was sent by Atlassian JIRA
(v6.2#6252)