Yeah, I mixed up 3 and 4. Part 4 is in tport_tls.c, in the method
tls_init_context().
-Jarod
________________________________
From: Inca Rose [mailto:incar...@gmail.com]
Sent: Tuesday, January 04, 2011 10:42 AM
To: Jarod Neuner
Cc: sofia-sip-devel@lists.sourceforge.net
Subject: Re: [Sofia-sip-devel] setting the password for a password protected
TLS private key in a pem file
Hi;
Thanks for the tips
1, 2 and 3 done
I think that in 3 you meant:
3) Parse for the new tag in tport_tls_init_master() and store it in
tls_issues_t. (tport_type_tls.c)
I'm not sure what I have to do in 4, I know that somewhere I need to set the
callback to pass the passowrd back to openSSL, but dont know were to set the
function.
Thanks
Inca
On Jan 4, 2011, at 5:40 PM, Jarod Neuner wrote:
Should take four changes in tport/ to add this capability.
1) Add new string tags for the certificate passphrase. (tport_tag.c and
sofia-sip/tport_tag.h )
2) Extend the tls_issues_t structure with a field for the passphrase.
(tport_tls.h)
3) Parse for the new tag in tport_tls_init_master() and store it in
tls_issues_t. (tport_tls.c)
4) Set the OpenSSL context in tport_tls_init_master(). (tport_type_tls.c)
-Jarod
________________________________
From: Inca Rose [mailto:incar...@gmail.com]
Sent: Tuesday, January 04, 2011 6:40 AM
To:
sofia-sip-devel@lists.sourceforge.net<mailto:sofia-sip-devel@lists.sourceforge.net>
Subject: [Sofia-sip-devel] setting the password for a password protected TLS
private key in a pem file
Hi;
I'm using sofia-sip with TLS.
It works OK while using non password protected agent.pem and cafile.pem files.
I cannot find a way to pass the password to tport when the private key in the
pem files are protected.
On openSSL I found the password callback function:
SSL_CTX_set_default_passwd_cb.
The Callback function gets called whenever openssl needs the password for the
private key.
Is this function implemented in sofi-sip ?? I'm using the latest git master
branch from.
If someone send me some hints I can implement this my self and send the patch
Thanks
Inca
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Sofia-sip-devel mailing list
Sofia-sip-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sofia-sip-devel
