<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 26, 2023 at 8:56 AM Jaco Kroon <<a href="mailto:jaco@uls.co.za">jaco@uls.co.za</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Hi George,</p>
<p>Is the default to build STIR/SHAKEN if libjwt is found, or will
it fail by default?</p></div></blockquote><div>It will build by default if libjwt >= 1.15.3 is found on the build system or if '--with-libjwt-bundled' is specified on the configure command line.</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><p>In other words, on systems where libjwt is not available, is
special action required to order to build? Does this vary based
on whether libjwt can be found or not?</p></div></blockquote><div>If libjwt >= 1.15.3 is not found on the build system and '--with-libjwt-bundled' was not specified on the configure command line, then res_stir_shaken will be disabled. The build will otherwise proceed normally. If you do a 'make cmenuselect' you'll see that res_stir_shaken has 'XXX' next to it and won't be selectable.</div><div><br></div><div>Does that make sense?</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>
<p>Kind regards,<br>
Jaco<br>
</p>
On 2023/09/26 16:46, George Joseph wrote:<br>
<blockquote type="cite">
<div dir="ltr">
<div>With our effort to harden Asterisk's STIR/SHAKEN
implementation, we're adding a new package (libjwt: JSON
WebToken) to the third-party directory next to jansson and
pjproject. Using libjwt allows us to remove the custom code
(which isn't reliable) in res_stir_shaken that handles the
assembly of the JWT and associated signature process that
STIR/SHAKEN relies upon and delegate that to libjwt. We're
including it in third-party because some distros don't include
that package and those that do are several releases behind the
latest. The minimum supported version will be 1.15.3 which is
the current libjwt version.</div>
<div><br>
</div>
<div>Since libjwt will be only used by res_stir_shaken at this
time, it's not a hard requirement to build asterisk as a whole
and isn't included in the install_prereq script. If you want
to build res_stir_shaken however, your build system must have
libjwt >= 1.15.3 installed or you'll need to specify
'--with-libjwt-bundled' on the ./configure command line. As
with jansson and pjproject, you can pre-download the libjwt
tarball (<a href="https://raw.githubusercontent.com/asterisk/third-party/master/libjwt/1.15.3/libjwt-1.15.3.tar.gz" target="_blank">https://raw.githubusercontent.com/asterisk/third-party/master/libjwt/1.15.3/libjwt-1.15.3.tar.gz</a>)
and use the '--with-download-cache' configure option to point
to the directory containing the tarball.</div>
<div><br>
</div>
<div>We are planning this change for the next releases of
Asterisk 18 and 20 and the first release of Asterisk 21.</div>
<div><br>
</div>
<span class="gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<div style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font color="#073763" style="--darkreader-inline-color: #94ccf7;">George Joseph</font></div>
<div style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font color="#073763" style="--darkreader-inline-color: #94ccf7;">Asterisk Software Developer</font></div>
<div style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font color="#073763" style="--darkreader-inline-color: #94ccf7;">Sangoma Technologies</font></div>
<div style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font color="#073763" style="--darkreader-inline-color: #94ccf7;">Check us out at <a href="http://www.sangoma.com/" style="color:rgb(17,85,204)" target="_blank">www.sangoma.com</a> and <a href="http://www.asterisk.org/" style="color:rgb(17,85,204)" target="_blank">www.asterisk.org</a></font></div>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
</blockquote>
</div>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev</a></blockquote></div></div>