Author: mikej Date: Wed Feb 11 10:11:56 2009 New Revision: 11770 Log: Mon Jan 5 04:22:01 CST 2009 Pekka Pessi <first.last@nokia.com> * RELEASE: added Jarod's description of TLS improvements Modified: freeswitch/trunk/libs/sofia-sip/RELEASE Modified: freeswitch/trunk/libs/sofia-sip/RELEASE ============================================================================== --- freeswitch/trunk/libs/sofia-sip/RELEASE (original) +++ freeswitch/trunk/libs/sofia-sip/RELEASE Wed Feb 11 10:11:56 2009 @@ -48,6 +48,8 @@ Contributors to this release ---------------------------- +Jarod Neuner <j dot neuner at networkharbor dot com> +Michael Jerris <mike at jerris dot com> <list of people who contributed to _this_ release - update as people's patches are added, or when you commit stuff - current development team members (see AUTHORS) may be omitted, @@ -65,11 +67,18 @@ Notes on new features --------------------- -<information about major new features - - new/changed/removed functionality - - links to further documentation - - section may be omitted for minor releases -/> +Jarod Neuner has improved certificate validation facilities of TLS +transport. Significant changes include: + +1) The TLS handshake is no longer handled via transparent negotiation. +Certain static methods from tport.c were exposed to make this possible. + +2) Certificate subjects are copied out of the peer certificate before +the first message is sent. The next patch will include code that allows +the stack to reject messages sent to a untrusted peer. + +3) The tport module can now report whether a secondary has a verified +certificate chain and the subjects of the peer certificate. Bugs fixed in this release --------------------------