From ec3f98b2b9e2a44b57f0b60401d2f037d3068e83 Mon Sep 17 00:00:00 2001 From: Kamailio Dev Date: Fri, 26 Mar 2021 15:01:13 +0100 Subject: [PATCH] modules: readme files regenerated - stirshaken ... [skip ci] --- src/modules/stirshaken/README | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/src/modules/stirshaken/README b/src/modules/stirshaken/README index f4ab54e6cbb..3b280ff289f 100644 --- a/src/modules/stirshaken/README +++ b/src/modules/stirshaken/README @@ -105,10 +105,11 @@ Chapter 1. Admin Guide 1. Overview - The module implements secure SIP identity specifications - STIR (Secure - Telephony Identity Revisited) and SHAKEN (Signature-based Handling of - Asserted information using toKENs) IETF extensions for SIP (RFC8224, - RFC8588). + This module implements STIR (Secure Telephony Identity Revisited) and + SHAKEN (Signature-based Handling of Asserted information using toKENs) + (RFC8224, RFC8588), with X509 certificate path check (ATIS + "Signature-based Handling of Asserted information using toKENs + (SHAKEN)", RFC5280 "6. Certification Path Validation"). stirshaken module exports the functions to check and to generate PASSporT, wrapped into SIP Identity header. For call authentication two @@ -179,7 +180,7 @@ modparam("stirshaken", "as_default_key", "/path/to/key") meaning for calls to stirshaken_check_identity_with_key(key) and stirshaken_check_identity_with_cert(cert). - Default value is 0, (turned off). + Default value is 1, (turned on). Example 1.2. Set vs_verify_x509_cert_path parameter ...