[asterisk-bugs] [JIRA] (ASTERISK-26303) [patch] BuildSystem: ca_list_path capabilities not detected in PJProject.

[Alexander Traud (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-26303?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alexander Traud closed ASTERISK-26303.
--------------------------------------


> [patch] BuildSystem: ca_list_path capabilities not detected in PJProject.
> -------------------------------------------------------------------------
>
>                 Key: ASTERISK-26303
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26303
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/BuildSystem
>    Affects Versions: 13.10.0
>            Reporter: Alexander Traud
>            Severity: Minor
>         Attachments: pjsip_ca_list_path.patch
>
>
> Since Asterisk 13.2 ([issue report 24575|https://issues.asterisk.org/jira/browse/ASTERISK-24575]), one can list the trusted Certificate Authorities not just as a single file but via a path {{ca_list_path}} in the configuration file {{pjsip.conf}}. This required the new function {{pj_ssl_cert_load_from_files2}} in PJProject ([change set 4973|https://trac.pjsip.org/repos/changeset/4973]). Availability of this function is detected via the Asterisk build system. Since Asterisk 13.8 ([code review 2200|https://gerrit.asterisk.org/2200]), this detection is broken, if not the bundled PJProject is used. Consequently, {{ca_list_path}} cannot be used currently.
> *Steps to Reproduce*, for example in Ubuntu 16.04 LTS
> {noformat}sudo apt install libssl-dev libncurses-dev libnewt-dev libxml2-dev libsqlite3-dev uuid-dev libjansson-dev libblocksruntime-dev
> wget github.com/pjsip/pjproject/archive/master.tar.gz
> tar zxf master.tar.gz
> cd ./pjproject*
> CFLAGS='-DNDEBUG -DPJ_HAS_IPV6=1' ./configure --prefix=/usr --enable-shared --enable-epoll
> make
> sudo make install
> cd ../
> wget downloads.asterisk.org/pub/telephony/asterisk/asterisk-13-current.tar.gz
> tar zxf asterisk*.tar.gz
> cd ./asterisk*
> ./configure
> make
> sudo make install{noformat}
> edit {{/etc/asterisk/pjsip.conf}}:{noformat}
> [transport]
> type = transport
> protocol = tls
> bind = 0.0.0.0
> ca_list_path = /etc/ssl/certs
> …{noformat}
> *Expected Results*
> Asterisk should start without any error message.
> *Actual Results*
> ‘Asterisk has been built against a version of pjproject that does not support the 'ca_list_path' option. Please upgrade to version 2.4 or later.’ And {{./configure}} gave: ‘checking for pjsip/include/pjsip/sip_util.h in -lpj no’.



--
This message was sent by Atlassian JIRA
(v6.2#6252)