[OpenSIPS-Devel] [ opensips-Feature Requests-3579703 ] TLS: CA loading on the fly

[SourceForge.net]

Feature Requests item #3579703, was opened at 2012-10-24 03:24
Message generated for change (Tracker Item Submitted) made by dragosoancea
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086413&aid=3579703&group_id=232389

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: core
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Dragos Oancea (dragosoancea)
Assigned to: Nobody/Anonymous (nobody)
Summary: TLS:  CA loading on the fly

Initial Comment:
Hi

I need opensips to be able to load CA files from a predefined directory which is configurable in the routing script
with an option like "tls_ca_dir" (similar to "tls_ca_list").
I also want to be able to load them on the fly , with an MI command.

I saw that SSL_CTX_load_verify_locations() is able to load the CAs from a directory , so I created
a small function in tls_init.c that would load the CAs from a directory at start time.
But how should I load the CA files with an MI command that would be called for example "load_ca_from_dir <filename>" ?
I do not want to restart opensips everytime a CA is added.
Is it possible to implement such a command easily  ?

Any comment or suggestion is welcome.

Thank you!
Dragos


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=1086413&aid=3579703&group_id=232389