July 2014 - h323plus - lists.packetizer.com

Re: [h323plus] [Openh323gk-users] Using LibreSSL instead of OpenSSL with GnuGk / H323Plus / PTLib
by Jan Willamowius 29 Jul '14

29 Jul '14

It would be nice if PTLib would do a pgk-config check for "openssl" or "libressl" to activate the OpenSSL code. I simply named the pgk-config file for LibreSSL "openssl.pc" to work around that. To use GnuTLS for the H.323 media encryption in GnuGk and H323Plus, PSSLxxx wrappers won't help. The OpenSSL compatibility mode of GnuTLS also isn't enough. regards, Jan Robert Jongbloed wrote: > Excellent! > > Are there any tweaks to the configure.ac that should happen to find > LibreSSL? > > > And re GnuTLS, the whole point of the PSSLxxx class wrappers in PTLib > was to allow for use of other API's to OpenSSL/LibreSSL. At least as a > configure/compile time option. One of these years, someone may cough up > the time/money to actually do the implementation .... > > *Robert Jongbloed* > OPAL/OpenH323/PTLib Architect and Co-founder. > Commercial support at http://www.voxlucida.com.au > /Travelling, so email responses may be slow!/ > > Robert. On 29/07/2014 5:30 pm, Jan Willamowius wrote: > > Hi, > > > > with the bugs recently found in OpenSSL, there is some concern how many > > more issues still lurk in the old and crufty OpenSSL code. There is a > > great effort by some OpenBSD developers to fork OpenSSL into > > "LibreSSL" (www.libressl.org) and clean up the code while keeping the > > public interface stable. > > > > I did a quick check and can report that GnuGk / H323Plus / PTLib > > compile well with LibreSSL instead of OpenSSL. All I had to do was > > provide a pkg-config file. So now we have a choice which library to use. > > > > I used LibreSSL Portable 2.0.3 for my test. > > > > Another interesting project would be to use GnuTLS as a replacement, > > but thats going to require a number of code changes on our side. > > > > Regards, > > Jan > > > -- Jan Willamowius, jan(a)willamowius.de, http://www.gnugk.org/

1 0

Using LibreSSL instead of OpenSSL with GnuGk / H323Plus / PTLib
by Jan Willamowius 29 Jul '14

29 Jul '14

Hi, with the bugs recently found in OpenSSL, there is some concern how many more issues still lurk in the old and crufty OpenSSL code. There is a great effort by some OpenBSD developers to fork OpenSSL into "LibreSSL" (www.libressl.org) and clean up the code while keeping the public interface stable. I did a quick check and can report that GnuGk / H323Plus / PTLib compile well with LibreSSL instead of OpenSSL. All I had to do was provide a pkg-config file. So now we have a choice which library to use. I used LibreSSL Portable 2.0.3 for my test. Another interesting project would be to use GnuTLS as a replacement, but thats going to require a number of code changes on our side. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: http://www.gnugk.org Support: http://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

FW: [h323-announce] H.323 Update Following the Sapporo Meeting
by Simon Horne 19 Jul '14

19 Jul '14

FYI The updates will be included in H.323v8 Simon From: h323-announce-bounces(a)lists.packetizer.com [mailto:h323-announce-bounces@lists.packetizer.com] On Behalf Of Paul E. Jones Sent: Sunday, July 20, 2014 8:19 AM To: H.323 Announce List Subject: [h323-announce] H.323 Update Following the Sapporo Meeting <http://www.packetizer.com> Folks, The most recent ITU-T SG16 meeting was held in Sapporo, Japan 30 June - 11 July 2014. Perhaps most significant at this meeting relating to H.323 is the fact that we approved two new Recommendations related to Telepresence systems: * ITU-T Rec. F.734, "Definitions, requirements, and use cases for Telepresence Systems" * ITU-T Rec. H.420, "Telepresence System Architecture" Progress was also made on revisions to each of the core H.323 Recommendations, namely H.323, H.225.0, and H.245. Some of the enhancements introduced are to support Telepresence systems, including the CLUE signaling channel. Support for the WebRTC Data Channel was also introduced in H.245. Of course, the work on Telepresence and WebRTC support is not complete, but progress is being made. We also adopted baseline text for the end-to-end Session Identifier, which is work that was initiated a few years ago. The work is being progressed in both the IETF and ITU in parallel, with the IETF work nearing completion. This work will allow for the identification of a communication session end-to-end from the point of origin to the point of termination, even if the call is carried over a mixture of H.323 and SIP networks. I have updated the document status page here: http://www.packetizer.com/ipmc/h323/doc_status.html. This shows the current status of the various H.323-related work items in ITU-T SG16. Best regards, Paul E. Jones http://paulej.com/

1 0