[Asterisk-Dev] Asterisk Manager encryption

[Kristian Kielhofner]

Kevin P. Fleming wrote:
> Steven Critchfield wrote:
> 
>> With openssl being BSD style licensed, it shouldn't be a problem to link
>> to the versions distributed with the distro of choice. This also keeps
>> us out of the patch race as it will be updated by the distros. 
> 
> 
> It's already being used, with an exception granted for Asterisk to be 
> able to link to it.

	Yep.

>> The concern I will toss out is, do we want to make openssl a
>> requirement, and how would we build without it otherwise. I'm assuming
>> the masochists of the group trying to run asterisk under windows would
>> not like it if they where excluded at this point.
> 
> 
> It's already a requirement for res_crypto.so, and can be skipped if 
> someone wants to do so. Presumably if we TLS-enabled the manager 
> interface, then TLS functionality would just be unavailable if linking 
> against OpenSSL was disabled at compile time.

	Just like now...  If you don't have openssl, you can't use its features 
- IAX keys.  Look at the top level Makefile.  There's even a (fairly 
new) define to disable crypto support altogether.

-- 
Kristian Kielhofner