[reSIProcate] proposed changes to cert-derived peer name handling

Rohan Mahy rohan at ekabal.com
Fri Mar 24 18:26:08 CST 2006


Hi,

Currently we have the getPeerName function which returns a Data.  In 
addition to the (minor) overhead of creating a Data, the function only 
works if there is a single sip or sips URI in the subjectAltName.  The 
subjectAltName can actually contain a stack of URIs here and it could 
be reasonable to get a certificate that covers both sip:sip.example.com 
and sip:example.com.

I think we should add a new function with the following signature:

bool matchesPeerName(Uri)

This would just check the Uri to see if it is in the stack of names 
from the subjectAltName and return yes or no.

thoughts?

thanks,
-rohan




More information about the resiprocate-devel mailing list