mirror of
https://github.com/signalwire/freeswitch.git
synced 2026-11-12 12:37:05 +00:00
FS-10167: Added support for SSL/TLS, specifically enforcing TLS 1.2 currently but could be more configurable later. Added support for obtaining SANS from X509 certificates within the default wss transport, SANS will be used for preapproved automatically registered identities, currently only being cached on server side for downstream connections providing the remote client upstream certificate SANS, but can also be used by a master to obtain initial master identities from it's own downstream certificate in the future (planned, but not yet implemented) as it is the exception with no upstream and MUST have downstream available. Also added the openssl executable to the projects being built in the libblade solution to provide a windows executable for certificate production when required.
This commit is contained in:
1 parent
63eec0ee3a
commit
ee8db10a5f
49 files changed
+1731
-84
No files matched your search
@@ -1,3 +1,15 @@
|
||||
blade:
|
||||
{
|
||||
transport:
|
||||
{
|
||||
wss:
|
||||
{
|
||||
ssl:
|
||||
{
|
||||
key = "./ca/intermediate/private/client@freeswitch-upstream.key.pem";
|
||||
cert = "./ca/intermediate/certs/client@freeswitch-upstream.cert.pem";
|
||||
chain = "./ca/intermediate/certs/ca-chain.cert.pem";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
Reference in new issue
Block a user