<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hi George,</p>
    <p>Is the default to build STIR/SHAKEN if libjwt is found, or will
      it fail by default?</p>
    <p>In other words, on systems where libjwt is not available, is
      special action required to order to build?  Does this vary based
      on whether libjwt can be found or not?</p>
    <p>Kind regards,<br>
      Jaco<br>
    </p>
    On 2023/09/26 16:46, George Joseph wrote:<br>
    <blockquote type="cite"
cite="mid:CAP=uFEu4heU5+eFGUFbTrrfT65WOE6ffHqD+qfR8_kN8ccMYPQ@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div>With our effort to harden Asterisk's STIR/SHAKEN
          implementation, we're adding a new package (libjwt: JSON
          WebToken) to the third-party directory next to jansson and
          pjproject.  Using libjwt allows us to remove the custom code
          (which isn't reliable) in res_stir_shaken that handles the
          assembly of the JWT and associated signature process that
          STIR/SHAKEN relies upon and delegate that to libjwt.  We're
          including it in third-party because some distros don't include
          that package and those that do are several releases behind the
          latest.  The minimum supported version will be 1.15.3 which is
          the current libjwt version.</div>
        <div><br>
        </div>
        <div>Since libjwt will be only used by res_stir_shaken at this
          time, it's not a hard requirement to build asterisk as a whole
          and isn't included in the install_prereq script.  If you want
          to build res_stir_shaken however, your build system must have
          libjwt >= 1.15.3 installed or you'll need to specify
          '--with-libjwt-bundled' on the ./configure command line.  As
          with jansson and pjproject, you can pre-download the libjwt
          tarball (<a
href="https://raw.githubusercontent.com/asterisk/third-party/master/libjwt/1.15.3/libjwt-1.15.3.tar.gz"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://raw.githubusercontent.com/asterisk/third-party/master/libjwt/1.15.3/libjwt-1.15.3.tar.gz</a>)
          and use the '--with-download-cache' configure option to point
          to the directory containing the tarball.</div>
        <div><br>
        </div>
        <div>We are planning this change for the next releases of
          Asterisk 18 and 20 and the first release of Asterisk 21.</div>
        <div><br>
        </div>
        <span class="gmail_signature_prefix">-- </span><br>
        <div dir="ltr" class="gmail_signature"
          data-smartmail="gmail_signature">
          <div dir="ltr">
            <div
              style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font
                style="--darkreader-inline-color: #94ccf7;"
                color="#073763">George Joseph</font></div>
            <div
              style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font
                style="--darkreader-inline-color: #94ccf7;"
                color="#073763">Asterisk Software Developer</font></div>
            <div
              style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font
                style="--darkreader-inline-color: #94ccf7;"
                color="#073763">Sangoma Technologies</font></div>
            <div
              style="color:rgb(136,136,136);font-family:tahoma,sans-serif"><font
                style="--darkreader-inline-color: #94ccf7;"
                color="#073763">Check us out at <a
                  href="http://www.sangoma.com/"
                  style="color:rgb(17,85,204)" target="_blank"
                  moz-do-not-send="true">www.sangoma.com</a> and <a
                  href="http://www.asterisk.org/"
                  style="color:rgb(17,85,204)" target="_blank"
                  moz-do-not-send="true">www.asterisk.org</a></font></div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
    </blockquote>
  </body>
</html>