1

GLSA 201209-15 (Normal): asterisk

view story
linux-howto

http://security.gentoo.org – Asterisk: Multiple vulnerabilities (Security)

linuxfan's picture
Submitted by linuxfan on 09/27/2012

Stories similar to GLSA 201209-15 (Normal): asterisk

GLSA 201206-05 (Normal): asterisk 48 weeks 23 hours ago

Asterisk: Multiple vulnerabilities

Asterisk: Multiple vulnerabilities

Asterisk: Multiple vulnerabilities

Asterisk: Denial of Service

GLSA 201209-02 (Normal): tiff 34 weeks 4 days ago

libTIFF: Multiple vulnerabilities

I am using Asterisk 1.8.10.1 and a MySQL database connected via ODBC to store CDRs. When my MySQL database isn't available when Asterisk starts or has an outage while Asterisk is running, I would expect Asterisk to retry to connect to the database, but this doesn't happen!

I have enabled TLS in asterisk

[general] tlsenable=yes tlscertfile=/etc/asterisk/ssl/asterisk.crt tlsdontverifyserver=no

Everything works, tested on CSipSimple. But there is one problem: not much clients support TLS with client certs (Microsip and blink do not support) How can I make asterisk do not require client certificates for TLS?

Thanks

If you just install Asterisk gui 2.o from: svn checkout http://svn.digium.com/svn/asterisk-gui/branches/2.0 And got a 404 URL not found <asterisk server> typing http://ip_machine:8088/static/config/index.html and already did the “make checkconfig” cmd getting an “everything seems good” output. and already Checked in Asterisk CLI:

PostgreSQL: Multiple vulnerabilities