You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Richard Mudgett 32f8a1345c AST-2014-007: Fix DOS by consuming the number of allowed HTTP connections. ... Simply establishing a TCP connection and never sending anything to the configured HTTP port in http.conf will tie up a HTTP connection. Since there is a maximum number of open HTTP sessions allowed at a time you can block legitimate connections. A similar problem exists if a HTTP request is started but never finished. * Added http.conf session_inactivity timer option to close HTTP connections that aren't doing anything. Defaults to 30000 ms. * Removed the undocumented manager.conf block-sockets option. It interferes with TCP/TLS inactivity timeouts. * AMI and SIP TLS connections now have better authentication timeout protection. Though I didn't remove the bizzare TLS timeout polling code from chan_sip. * chan_sip can now handle SSL certificate renegotiations in the middle of a session. It couldn't do that before because the socket was non-blocking and the SSL calls were not restarted as documented by the OpenSSL documentation. * Fixed an off nominal leak of the ssl struct in handle_tcptls_connection() if the FILE stream failed to open and the SSL certificate negotiations failed. The patch creates a custom FILE stream handler to give the created FILE streams inactivity timeout and timeout after a specific moment in time capability. This approach eliminates the need for code using the FILE stream to be redesigned to deal with the timeouts. This patch indirectly fixes most of ASTERISK-18345 by fixing the usage of the SSL_read/SSL_write operations. ASTERISK-23673 #close Reported by: Richard Mudgett ........ Merged revisions 415841 from http://svn.asterisk.org/svn/asterisk/branches/1.8 git-svn-id: https://origsvn.digium.com/svn/asterisk/certified/branches/1.8.28@415975 65c4cc65-6c06-0410-ace0-fbb531ad65f3		12 years ago
..
adsi.conf.sample	…
agents.conf.sample	configs/agents.conf.sample - Remove example for non-functional "goodbye" parameter	12 years ago
ais.conf.sample	…
alarmreceiver.conf.sample	…
alsa.conf.sample	…
amd.conf.sample	…
app_mysql.conf.sample	…
asterisk.adsi	…
asterisk.conf.sample	internal_timing: Remove the option and always make it enabled if a timing module is loaded.	12 years ago
calendar.conf.sample	…
ccss.conf.sample	…
cdr.conf.sample	…
cdr_adaptive_odbc.conf.sample	Set snarkiness = 0 in cdr_adaptive_odbc.conf.sample	14 years ago
cdr_custom.conf.sample	…
cdr_manager.conf.sample	…
cdr_mysql.conf.sample	…
cdr_odbc.conf.sample	…
cdr_pgsql.conf.sample	…
cdr_sqlite3_custom.conf.sample	Don't enable sqlite3 CDRs by default in sample configs.	14 years ago
cdr_syslog.conf.sample	…
cdr_tds.conf.sample	…
cel.conf.sample	Add missing CEL logging fields to various CEL backends.	14 years ago
cel_custom.conf.sample	Add missing CEL logging fields to various CEL backends.	14 years ago
cel_odbc.conf.sample	Correct eventtype names in cel_odbc and cel_pgsql sample files	14 years ago
cel_pgsql.conf.sample	Correct eventtype names in cel_odbc and cel_pgsql sample files	14 years ago
cel_sqlite3_custom.conf.sample	Add missing CEL logging fields to various CEL backends.	14 years ago
cel_tds.conf.sample	…
chan_dahdi.conf.sample	Documentation fix - waitfordialtone is not boolean, it's time in milliseconds	13 years ago
chan_mobile.conf.sample	…
chan_ooh323.conf.sample	…
cli.conf.sample	…
cli_aliases.conf.sample	…
cli_permissions.conf.sample	…
codecs.conf.sample	…
console.conf.sample	…
dbsep.conf.sample	Cleanup references to sipusers and sipfriends dynamic realtime families	14 years ago
dnsmgr.conf.sample	…
dsp.conf.sample	dsp.c User Configurable DTMF_HITS_TO_BEGIN and DTMF_MISSES_TO_END	14 years ago
dundi.conf.sample	…
enum.conf.sample	…
extconfig.conf.sample	Modified the list of keys for the driver backends for sake of sample clarity	13 years ago
extensions.ael.sample	…
extensions.conf.sample	…
extensions.lua.sample	…
extensions_minivm.conf.sample	…
features.conf.sample	Fix accidental use of tabs instead of spaces from previous features.conf.sample change	14 years ago
festival.conf.sample	…
followme.conf.sample	…
func_odbc.conf.sample	…
gtalk.conf.sample	…
h323.conf.sample	Add "autoframing" option to sip.conf.sample and h323.conf.sample.	13 years ago
http.conf.sample	AST-2014-007: Fix DOS by consuming the number of allowed HTTP connections.	12 years ago
iax.conf.sample	chan_iax2: Block unnecessary control frames to/from the wire.	12 years ago
iaxprov.conf.sample	…
indications.conf.sample	indications.conf: add stutter tone; end properly	12 years ago
jabber.conf.sample	Merge changes for Digium phone support, and default module building.	14 years ago
jingle.conf.sample	…
logger.conf.sample	…
manager.conf.sample	Merge changes for Digium phone support, and default module building.	12 years ago
meetme.conf.sample	…
mgcp.conf.sample	…
minivm.conf.sample	…
misdn.conf.sample	…
modules.conf.sample	…
musiconhold.conf.sample	…
muted.conf.sample	…
osp.conf.sample	…
oss.conf.sample	…
phone.conf.sample	…
phoneprov.conf.sample	…
queuerules.conf.sample	…
queues.conf.sample	queues.conf.sample Fix documented default for persistentmembers	12 years ago
res_config_mysql.conf.sample	Cleanup references to sipusers and sipfriends dynamic realtime families	14 years ago
res_config_sqlite.conf.sample	…
res_curl.conf.sample	…
res_fax.conf.sample	res_fax: Warn that minrate=2400 is not valid for V.27 instead of failing load.	12 years ago
res_ldap.conf.sample	LDAP Realtime Peers Cannot Register	14 years ago
res_odbc.conf.sample	configs: Clean up long line and typo in res_odbc.conf.sample.	12 years ago
res_pgsql.conf.sample	…
res_pktccops.conf.sample	Comment out entries in sample res_pktccops.conf.	15 years ago
res_snmp.conf.sample	…
res_stun_monitor.conf.sample	Re-resolve the STUN address if a STUN poll fails for res_stun_monitor.	14 years ago
rtp.conf.sample	Adds pjmedia probation concepts to res_rtp_asterisk's learning mode.	14 years ago
say.conf.sample	…
sip.conf.sample	Merge changes for Digium phone support, and default module building.	12 years ago
sip_notify.conf.sample	Add Digium phones context to sip_notify sample config.	14 years ago
skinny.conf.sample	…
sla.conf.sample	astobj2-ify the SLA code	13 years ago
smdi.conf.sample	…
telcordia-1.adsi	…
udptl.conf.sample	…
unistim.conf.sample	…
users.conf.sample	…
voicemail.conf.sample	configs/voicemail.conf.sample - Make mailcmd sample text more explicit	12 years ago
vpb.conf.sample	…