Opened 15 years ago

Last modified 15 years ago

#957 closed enhancement

SSL/secure socket abstraction and SIP TLS transport rewrite — at Version 4

Reported by: nanang Owned by: bennylp
Priority: normal Milestone: release-1.5
Component: common Version: trunk
Keywords: Cc:
Backport to 1.x milestone: Backported:

Description (last modified by bennylp)

Objective:

To create a portable SSL/secure socket abstraction in PJLIB.

Specifications:

PJLIB:

  • asynchronous I/O API similar to PJLIB's Active Socket API
  • supports various backends such as OpenSSL, Symbian's CSecureSocket, and Windows SSPI.
  • (limited) certificate management API, for backends that supports it.

PJSIP:

  • rewrite of PJSIP's SIP SSL transport to use the new PJLIB secure socket.

Implementation:

This initial implementation supports:

  • OpenSSL
  • CSecureSocket on Symbian

Limitations:

  • CSecureSocket does not support server socket (SDK limitation).
  • Servername verification may not work.
  • CSecureSocket cannot specify certificate when required by server (SDK limitation?)

Change History (4)

comment:1 Changed 15 years ago by nanang

In r2913, initial version of TLS transport for Symbian, includes:

  • Secure socket, generic abstraction and Symbian implementation (using CSecureSocket).
  • Initial rewrite of SIP TLS transport.
  • Updated symbian_ua.mmp to support SIP transport TLS (experimental).

comment:2 Changed 15 years ago by nanang

  • Component changed from pjsip to common
  • Summary changed from TLS transport on Symbian to Implement SSL socket abstraction and rewrite SIP TLS transport.

comment:3 Changed 15 years ago by nanang

In r2950:

  • Added SSL socket abstraction with OpenSSL backend (source only, i.e: hasn't been integrated to build settings).
  • Updated cipher data type and added cipher constants (Symbian SSL socket has also been updated).
  • Updated SIP TLS transport to allow setting certificate/credential (via file).

comment:4 Changed 15 years ago by bennylp

  • Description modified (diff)
  • Summary changed from Implement SSL socket abstraction and rewrite SIP TLS transport. to SSL/secure socket abstraction and SIP TLS transport rewrite
Note: See TracTickets for help on using tickets.