From 6c9711840582fdc944e169560440cc2a51575914 Mon Sep 17 00:00:00 2001 From: russell Date: Fri, 1 Aug 2008 18:16:24 +0000 Subject: Merge changes from team/bbryant/keyrotation This set of changes enhances IAX2 encryption support by adding key rotation to provide enhanced security. The key used for encryption is rotated right after the call gets set up, and then again every few minutes. This was discussed at the last AstriDevCon. For interoperability with older versions of Asterisk, there is an option that disables key rotation. (closes issue #13018) Reported by: bbryant Patches: 07072008__iax2_key_rotation.diff uploaded by bbryant (license 36) Tested by: russell, bbryant git-svn-id: http://svn.digium.com/svn/asterisk/trunk@135158 f38db490-d61c-443f-a65b-d21fe96a405b --- CHANGES | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index 0552d861b..0b6a15f77 100644 --- a/CHANGES +++ b/CHANGES @@ -137,6 +137,10 @@ SIP Changes IAX Changes ----------- * Existing DNS manager lookups extended to check for SRV records. + * IAX2 encryption support has been improved to support periodic key rotation + within a call for enhanced security. The option "keyrotate" has been + provided to disable this functionality to preserve backwards compatibility + with older versions of IAX2 that do not support key rotation. CLI Changes ----------- -- cgit v1.2.3