[Home]

Summary:ASTERISK-26303: [patch] BuildSystem: ca_list_path capabilities not detected in PJProject.
Reporter:Alexander Traud (traud)Labels:
Date Opened:2016-08-17 06:21:23Date Closed:2016-08-17 08:57:07
Priority:MinorRegression?
Status:Closed/CompleteComponents:Core/BuildSystem
Versions:13.10.0 Frequency of
Occurrence
Related
Issues:
Environment:Attachments:( 0) pjsip_ca_list_path.patch
Description:Since Asterisk 13.2 ([issue report 24575|https://issues.asterisk.org/jira/browse/ASTERISK-24575]), one can list the trusted Certificate Authorities not just as a single file but via a path {{ca_list_path}} in the configuration file {{pjsip.conf}}. This required the new function {{pj_ssl_cert_load_from_files2}} in PJProject ([change set 4973|https://trac.pjsip.org/repos/changeset/4973]). Availability of this function is detected via the Asterisk build system. Since Asterisk 13.8 ([code review 2200|https://gerrit.asterisk.org/2200]), this detection is broken, if not the bundled PJProject is used. Consequently, {{ca_list_path}} cannot be used currently.

*Steps to Reproduce*, for example in Ubuntu 16.04 LTS
{noformat}sudo apt install libssl-dev libncurses-dev libnewt-dev libxml2-dev libsqlite3-dev uuid-dev libjansson-dev libblocksruntime-dev
wget github.com/pjsip/pjproject/archive/master.tar.gz
tar zxf master.tar.gz
cd ./pjproject*
CFLAGS='-DNDEBUG -DPJ_HAS_IPV6=1' ./configure --prefix=/usr --enable-shared --enable-epoll
make
sudo make install
cd ../
wget downloads.asterisk.org/pub/telephony/asterisk/asterisk-13-current.tar.gz
tar zxf asterisk*.tar.gz
cd ./asterisk*
./configure
make
sudo make install{noformat}
edit {{/etc/asterisk/pjsip.conf}}:{noformat}
[transport]
type = transport
protocol = tls
bind = 0.0.0.0
ca_list_path = /etc/ssl/certs
…{noformat}

*Expected Results*
Asterisk should start without any error message.

*Actual Results*
‘Asterisk has been built against a version of pjproject that does not support the 'ca_list_path' option. Please upgrade to version 2.4 or later.’ And {{./configure}} gave: ‘checking for pjsip/include/pjsip/sip_util.h in -lpj no’.
Comments:By: Alexander Traud (traud) 2016-08-17 06:29:05.047-0500

The attached patch allows this again, even when not the bundled but an external PJProject is used. The cause was a copy and paste error in the change for the bundled PJProject. Because that change did not create an issue report in Jira, I am not able to link to that.