[sr-dev] git:master:2e8ead7e: modules: Add stirshaken module

Module: kamailio Branch: master Commit: 2e8ead7ec434e27a344916ddbf092337e6a0bdb4 URL: https://github.com/kamailio/kamailio/commit/2e8ead7ec434e27a344916ddbf09233… Author: Piotr Gregor <piotr(a)signalwire.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2021-03-18T08:43:26+01:00 modules: Add stirshaken module This module uses libstirshaken to implement STIR-Shaken authentication and verification functions (STI-AS/VS). It allows for easy verification of a SIP call containing PASSporT wrapped into SIP Identity Header using a specific certificate, or a specific key, or by performing complete check on PASSporT including downloading certificate referenced in it's x5u header, and optionally checking it against trusted root certificates (X509 cert path check). Certificates may be cached and loaded from disk. Example usage: loadmodule "stirshaken" modparam("stirshaken", "as_default_key", "/path/to/key") modparam("stirshaken", "vs_verify_x509_cert_path", 1) modparam("stirshaken", "vs_ca_dir", "/path/to/ca") modparam("stirshaken", "vs_cache_certificates", 1) modparam("stirshaken", "vs_cache_dir", "/tmp/cert_cache") modparam("stirshaken", "vs_cache_expire_s", 90) request_route { (...) stirshaken_add_identity("https://sp.com/sp.pem".pem", "B", "+44100", "+44200", "ref"); (...) request_route { (...) stirshaken_check_identity(); (...) --- Added: src/modules/stirshaken/Makefile Added: src/modules/stirshaken/stirshaken_mod.c --- Diff: https://github.com/kamailio/kamailio/commit/2e8ead7ec434e27a344916ddbf09233… Patch: https://github.com/kamailio/kamailio/commit/2e8ead7ec434e27a344916ddbf09233…