Changelog for libeXosip2-15-5.3.0-82.29.x86_64.rpm :

* Mon Sep 05 2022 Benoît Monin - update to 5.3.0:
* rewrite socket error management in order to apply them to all pending ICT and NICT transactions
* add time information in cb_xixt_kill_transaction callback for debugging
* eXosip_lock will now include read on sockets
* [TLS] allow to accept wildcard with a new bit in tls_verify_client_certificate
* [TLS] disable loading OS certifiate with a new bit in tls_verify_client_certificate
* [TLS] I beleive there is no reason to cut packet in 500 bytes chunks on ios
* [EXOSIP_OPT_SET_CONTACT_DIALOG_EXTRA_PARAMS] new option to set Contact parameters in request/answers dialogs
* [AMSIP_OPTION_SET_SIP_INSTANCE] allow any value inside +sip.instance instead of only urn:uuid
* [epoll] fix eXosip_event_wait when using epoll implementation where events are distributed in the next eXosip_event_wait call- additional changes from 5.2.1:
* [ENABLE_MAIN_SOCKET] fix epoll mechanism for server socket with TCP and TLS
* [crash] check scheme upon processing 3xx
* [ssl] fix to be compatible with libressl
* [ssl] https://savannah.nongnu.org/patch/?10046 compatibility with openssl below 1.1.0
* fix when Content-Type indicates application/sdp, but there is no body
* [TLS] modify the code for TLS validation in order to improve logs and details on the connection
* use time_t instead of int for r_retry_after_delay variable [fix 1367a34ca commited on March 1st]
* eXosip_default_action will return OSIP_RETRY_LIMIT when limit is reached
* make sure to obey the Retry-After header from REGISTER reply
* use newer osip_timersub MACRO
* [bug#60024] fix openssl usage to always use callback mode for private key password, even when missing
* eXosip_reset_transports was not effective any more since [5.1.2] [commit 705643fa 2020-07-07] [do not use unless you understand it]
* [windows] a HANDLE is leaked when loading trusted certificates
* dp layer: handle WSAEMSGSIZE when buffer is too short for complete incoming message
* cleaner code to retreive an SDP from a SIP message
* fix crash when ENABLE_MAIN_SOCKET is defined and epoll is used- additional changes from 5.2.0:
* fix memory and socket leak [major] [affected TCP, TLS, UDP: since 5.1.2, need update asap]
* fix to make sure a non yet established TLS descriptor with read descriptor set will be processed when no outgoing transaction is in a state to handle it [since 5.1.2]
* fix SRV rotation for TLS [was rotating TCP records instead of TLS] [since 5.1.2]
* fix duplicate packets for TCP and TLS when several outgoing NICT are happening at the same time [since 5.1.2]
* add outbound proxy parameter in sip_monitor tool
* ABI update: modification of \"eXosip_tls_ctx_t\"- additional changes from 5.1.3:
* EXOSIP_OPT_FORCE_CONNECTIONREUSE; new option to force reusing established socket for ACK and dialog message
* tls: fix building DH parameter with 5.1.2 and openssl < 1.1.0- additional changes from 5.1.2:
* tls: use RFC 5114 dh param with 2048 bits size.
* tls: use 2048 bits for ephemeral RSA key genearation.
* tls: use SSL_OP_NO_COMPRESSION to make sure it\'s disabled.
* tls: use SSL_OP_NO_TICKET to disable ticket.
* tls: use HIGH:!COMPLEMENTOFDEFAULT:!kRSA:!PSK:!SRP cipher list for higher security and less ciphers
* fix possible race condition in sample code [sip_reg and sip_monitor]
* new format style using clang-format.
* reduce and rewrite logs for readability.
* fix broken epoll implementation. (DO NOT USE 5.1.1 with epoll)
* rewrite UDP/TCP/TLS (and DTLS untested) for both select and epoll mode.
* Fix NAPTR/SRV on windows when CARES is not used. (not advised)
* ACK sent out of transaction with no existing connection may be sent later. (TCP/TLS)
* Upon TLS loss, try to use domain or NAPTR SNI when TLS connection is not initiated by an outgoing transaction.
* sip_monitor: new tool to monitor sip service
* add support for authentication using SHA-256 (openssl required)
* only use first supported proposed authentication when same realm is used
* fix: upon UDP errors, like ICMP buffer size may reach abnormal values (avoid useless reallocation)- additional changes from 5.1.1:
* new API: int eXosip_hexa_generate_random(char
*val, int val_size) int eXosip_byte_generate_random(char
*val, int val_size)
* provide more entropy with eXosip_byte_generate_random (with openssl when available).
* fix TLS security issue reported by Alexander Traud regarding hostname validation when using NAPTR/SRV.
* add support for epoll (detected by configured) // becomes the default on linux platforms with autotools
* fix bug #56839: The cnonce should not be static -this is identified as replay attack by some services-.
* fix tcp and tls connection failure detection (accelerate error detection and recovery)
* fix: fixed a crash with DTLS- update soname to libeXosip2-15- add source archive signature and author keyring- add new binaries sip_monitor and sip_storm
* Wed Feb 05 2020 David Sugar - Update to 5.1.0
* critical security issues
* See package, very many long neglected bug fixes
* directly supports openssl 1.0.2-1.1.1 (and libressl) without patching- drop no longer needed openssl patch openssl110-fix.patch- now requires libosip2 >= 5.1.0- now requires c-ares for proper resolver functionality- license was actually gpl-2.0-or-later, confirmed from sources and headers
* Fri Apr 20 2018 hpjAATTurpla.net- apply openssl110-fix.patch for Leap >= 15.0 only
* Thu Dec 28 2017 fisiuAATTopensuse.org- Update to 5.0.0:
* major API update: add a new parameter to eXosip_call_build_prack in order to create the PRACK for this specific response and not for the latest.
* major API update: removal of eX_refer.h API. REFER are now handled with subscriptions APIs. eXosip_refer_build_request removed eXosip_refer_send_request removed
* major API update: subscription now handle both SUBSCRIBE and REFER with the same APIs: eXosip_subscription_build_initial_refer ADDED eXosip_subscribe_build_initial_request renamed eXosip_subscription_build_initial_subscribe eXosip_subscribe_send_initial_request renamed eXosip_subscription_send_initial_request eXosip_subscribe_build_refresh_request renamed eXosip_subscription_build_refresh_request eXosip_subscribe_send_refresh_request renamed eXosip_subscription_send_refresh_request eXosip_subscribe_remove renamed eXosip_subscription_remove EXOSIP_IN_SUBSCRIPTION_
* and EXOSIP_SUBSCRIPTION_
* events may now relate to REFER subscription.
* major API change: eXosip_automatic_refresh is obsolete and has been removed. only use eXosip_automatic_action instead
* API update: eXosip_options_send_request returns a positive transaction id (tid) on success. eXosip_publish returns a positive transaction id (tid) on success. note: eXosip_message_send_request was already returing the transaction id (tid) on success.
* new API options: EXOSIP_OPT_REMOVE_PREROUTESET: to keep Route Set EXOSIP_OPT_SET_SIP_INSTANCE: define +sip.instance parameter in Contact headers EXOSIP_OPT_ENABLE_USE_EPHEMERAL_PORT: option to use/not use ephemeral port in Contact. EXOSIP_OPT_ENABLE_REUSE_TCP_PORT: option to reuse port. EXOSIP_OPT_AUTO_MASQUERADE_CONTACT: option to enable automatic masquerading for Contact headers. EXOSIP_OPT_UDP_LEARN_PORT: obsolete and will be removed in the future. EXOSIP_OPT_SET_DEFAULT_CONTACT_DISPLAYNAME: define a display name to be added in Contact headers
* new API options: (high load traffic use-case: DO NOT USE FOR COMMON USAGE) EXOSIP_OPT_SET_MAX_MESSAGE_TO_READ: set the number of message to read at once for each network processing. EXOSIP_OPT_SET_MAX_READ_TIMEOUT: set the period in nano seconds during we read for sip message. EXOSIP_OPT_GET_STATISTICS: retreive numerous statistics.
* rewrite/update autotools and ./configure options - -enable-pthread=[autodetect|force] autodetect POSIX threads or force -DHAVE_PTHREAD [default=autodetect] - -enable-semaphore=[autodetect|semaphore|sysv] select your prefered semaphore [default=autodetect].
* fix bug when reading sip message longuer than 8000 over UDP and TLS.
* improve eXosip_add_authentication_info to avoid duplicate credentials
* if a SUBSCRIBE is rejected, the context will be released automatically
* add failover after a DNS failure.
* fallback to SRV even if we receive a NOTFOUND reply for NAPTR.
* fix route set with strict router.
* rename usage of -DHAVE_CARES_H into -DHAVE_ARES_H real name of header.
* remove warnings mainly related to socket API (getnameinfo/bind/accept/recv/connect/sendto)
* rewrite all loop using iterator to improve performance (useful for high load traffic)
* rewrite Via and Contact management: both will now contains the IP of the real network interface instead of the default one.
* improve NAPTR failover, more reliable // add failover for 503 answer
* improve interval to force REGISTER refresh upon network error and failover.
* improve TCP socket management
* add a callback to simplify/optimize/accelerate usage of wakelocks in android application using exosip2.
* improve TLS, add TLSv1.1, TLSv1.2, disable weak cipher (FREAK) and enable ECDHE cipher.
* add support for SNI tls extension (openssl 1.0.2)
* add try/except on windows to catch possible missing qwave (windows server)
* implement a timeout (32 seconds) for establishing a TCP and TLS connection.
* if a connection is failing, report the failure asap.
* fix memory leak in eXosip_call_get_referto
* remove extra connect on socket for TCP and TLS (not allowed for tcp stream)
* fix to correctly discard INVITE retransmission with same branch received after original INVITE was replied
* add WSACleanup for each WSAStartup call (windows)
* do not include contact in BYE and CANCEL
* fix to use sips when appropriate (in Contact)
* fix to avoid handling negative content-length
* do not start naptr for incoming transactions.
* fix bug when rseq is empty but exist
* add support for QOS on windows.
* improve connection handling/failure detection, keep alive options, in TLS, TCP, UDP.
* update static IDs (cid/did/rid/pid) to use range from 0 to INT_MAX to avoid possible collision
* other minor updates.- Drop libeXosip2-sslverifypaths.patch: fixed upstream.- Add openssl110-fix.patch: fix build with openssl 1.1.0.
* Sun May 25 2014 fisiuAATTopensuse.org- Update to 4.1.0:
* improve timer and use UPDATE if advertised, INVITE otherwise.
* improve PRACK support.
* option to disable automatic BYE answer.
* option to enable/disable IPv6 per eXosip_t instance.
* option to disable DNS cache.
* improve network support for several eXosip_t instance. keepalive setting is per instance. ipv4/ipv6 setting is per instance. improve network setting to avoid conflict upon transport change.
* fix tcp and tls connect() for slow connection.
* use TCP_NODELAY on more platform.
* use Authorization header for 401 // simplify authentication code.
* minor expires for REGISTER improvments.
* copy call-info over SUBSCRIBE refresh.
* allow more TLS error if verification is disabled.
* fix if NO NAPTR is availble.
* add support for Windows Phone 8.
* fix to use cache for TCP and TLS.
* fix possible leaks on implementation errors.
* add TSC experimental support.- eXosip2 (4.0.0)
* modify configuration APIs to use eXosip_set_option
* fix bug: do not create new PRACK if it already exist for an answer.
* update to latest osip // test time compensation for android.
* use ephemaral port in standard TCP and TLS version.
* return tid number so that we can match the response event.
* use system independant time for osip_gettimeofday on unix platform.
* major API update: several \"struct eXosip_t\" can be handled at the same time. This can be used to have several transport layer running at the same time.
* many tiny other change.- Rebase libeXosip2-sslverifypaths.patch.
* Mon Apr 28 2014 meissnerAATTsuse.com- libeXosip2-sslverifypaths.patch: set default SSL verify locations (bnc#871099)- build with -O2 (--disable-debug)
* Fri Jan 25 2013 jengelhAATTinai.de- Remove redundant tags/sections from specfile
* Sun Jan 16 2011 seife+obsAATTb1-systems.com- update to version 3.5.0
* a lot of minor change/fix/improvments, sorry for not being able to have an history here...- eXosip2 (3.4.0)
* handle keep alive for TCP/TLS.
* fix when receiving additionnal CRLF on reliable transport.
* modification to allow non-blocking socket for reliable transport. (TLS/TCP)
* fix tag issue with application where tag is missing.
* fix Contact header in request within dialog for non-udp protocol.
* remove 481 auto answer for unsolicited NOTIFY.
* fix static id range.
* initial code for TCP fragmentation.
* osip_list prototypes and warnings fix
* fix transport matching for redirection using other transport than udp- eXosip2 (3.3.0)
* Fix when 200ok include a contact with an empty line parameter.
* Fix for replaces header longuer than 256 char.
* Fix SRV record with more than 10 answers.
* Sort SRV record.
* Option to disable NAPTR requests.- eXosip2 (3.2.0)
* Improve TLS support and add an API for ssl information & files.
* return new error code for all API.
* remove automatic answers to PRACK. (must be done in application now)
* remove automatically outgoing non established susbscriptions.- packaging stuff:
* fix spelling errors in descriptions, other rpmlint warnings
* rename libeXosip2-4 to libeXosip2-6 (changed SONAME)
* Wed Apr 02 2008 hvogelAATTsuse.de- update to version 3.1.0
* add AKA authentication
* improve compliance & flexibility
* fix building SUBSCRIBE refresh
* fix compliance issue with refer-to to-tag/from-tag parameters.
* fix bug for retransmissions or ACK with proxy that resolve to several IP.
* handle the \"expires\" parameter to update registration interval.
* handle the \"expires\" parameter to update publication interval.
* handle automatically publish refresh, and some error codes (423).
* Thu Feb 28 2008 roAATTsuse.de- fix build with current libosip2 (MD5... -> osip_MD5...)