eXosip2_license(3)
π NAME π
eXosip2_license β COPYING
okay so bestie, real talk: this man page isn't like the others. there's no synopsis, no flags, no cute little options list. it's literally just the whole license, front to back, and it's long, so buckle up. this is eXosip2_license(3) from libeXosip2 (yes the man page header says all three: eXosip2_license(3), libeXosip2, eXosip2_license(3) β iconic self-reference tbh) π
also important: this is legal text. so everything below in the code blocks is word-for-word β i'm not slangifying actual license clauses, that would be a crime and also a terrible idea. my commentary is my own, the clauses are the clauses. periodt.
π GNU GENERAL PUBLIC LICENSE, Version 2, June 1991 π
Copyright (C) 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
like β the address, the year, the "changing it is not allowed" β all of it stays, exactly. you may copy and distribute verbatim copies of this license doc, but you may not change it. got it? π«Ά
πΈ Preamble πΈ
the vibes section. the "why are we doing this" section. here she is:
The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too.
okay so the whole point: most licenses take your freedom, this one guarantees it. also note the throwaway about the GNU Library General Public License covering some other FSF software instead β don't forget that, iykyk π
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
this service if you wish), that you receive source code or can get it
if you want it, that you can change the software or use pieces of it
in new free programs; and that you know you can do these things.
free as in freedom, not free as in free coffee. and yes you can charge for the act of distributing a copy if you want. no cap β
To protect your rights, we need to make restrictions that forbid
anyone to deny you these rights or to ask you to surrender the rights.
These restrictions translate to certain responsibilities for you if you
distribute copies of the software, or if you modify it.
the way that "protecting your rights" = "adding restrictions" is such a plot twist but it makes sense. it's giving legal jiu-jitsu π
For example, if you distribute copies of such a program, whether
gratis or for a fee, you must give the recipients all the rights that
you have. You must make sure that they, too, receive or can get the
source code. And you must show them these terms so they know their
rights.
three things, every time: give them your rights, make sure they can get the source, show them these terms. gratis or fee, doesn't matter. π₯
We protect your rights with two steps: (1) copyright the software, and
(2) offer you this license which gives you legal permission to copy,
distribute and/or modify the software.
two steps, that's it: copyright it, then license it. π
Also, for each author's protection and ours, we want to make certain
that everyone understands that there is no warranty for this free
software. If the software is modified by someone else and passed on, we
want its recipients to know that what they have is not the original, so
that any problems introduced by others will not reflect on the original
authors' reputations.
there is no warranty. say it with me. and if someone else modded it and handed it to you, you deserve to know it's not the original, so nobody blames the og authors for someone else's chaos π
Finally, any free program is threatened constantly by software
patents. We wish to avoid the danger that redistributors of a free
program will individually obtain patent licenses, in effect making the
program proprietary. To prevent this, we have made it clear that any
patent must be licensed for everyone's free use or not licensed at all.
patents. the final boss. the rule here is clean: a patent gets licensed for everyone's free use, or it doesn't get licensed at all. no sneaky individual patent grabs, tyvm π
The precise terms and conditions for copying, distribution and
modification follow.
and now we get into it. deep breath bestie π«Ά
π₯ GNU GENERAL PUBLIC LICENSE π₯
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
β¨ 0 β¨
0. This License applies to any program or other work which contains
a notice placed by the copyright holder saying it may be distributed
under the terms of this General Public License. The "Program", below,
refers to any such program or work, and a "work based on the Program"
means either the Program or any derivative work under copyright law:
that is to say, a work containing the Program or a portion of it,
either verbatim or with modifications and/or translated into another
language. (Hereinafter, translation is included without limitation in
the term "modification".) Each licensee is addressed as "you".
definitions time!! "Program" = the thing with the notice. "work based on the Program" = the Program itself or any derivative work under copyright law β verbatim, modified, or translated. and yes, translation counts as modification, they said so explicitly. also hi, "you" is you. hiii π
Activities other than copying, distribution and modification are not
covered by this License; they are outside its scope. The act of
running the Program is not restricted, and the output from the Program
is covered only if its contents constitute a work based on the
Program (independent of having been made by running the Program).
Whether that is true depends on what the Program does.
running it is not restricted. huge. the output only gets caught up in this if the output itself counts as a work based on the Program β and whether that's true depends on what the Program actually does. vibe check on a per-program basis, basically π¦
β¨ 1 β¨
1. You may copy and distribute verbatim copies of the Program's
source code as you receive it, in any medium, provided that you
conspicuously and appropriately publish on each copy an appropriate
copyright notice and disclaimer of warranty; keep intact all the
notices that refer to this License and to the absence of any warranty;
and give any other recipients of the Program a copy of this License
along with the Program.
You may charge a fee for the physical act of transferring a copy, and
you may at your option offer warranty protection in exchange for a fee.
verbatim copies? slay, go off. any medium. but conspicuously publish the copyright notice + warranty disclaimer on each copy, keep all the notices intact (license notice AND the no-warranty notice), and hand every recipient a copy of this License with the Program. don't lose the paperwork πβ¨
and yeah β you can charge a fee for the physical act of transferring a copy, and optionally sell warranty protection for a fee too. hustle respectfully πΈ
β¨ 2 β¨
2. You may modify your copy or copies of the Program or any portion
of it, thus forming a work based on the Program, and copy and
distribute such modifications or work under the terms of Section 1
above, provided that you also meet all of these conditions:
modding is allowed!! but section 1 still applies, and you gotta hit all of these:
a) You must cause the modified files to carry prominent notices
stating that you changed the files and the date of any change.
a)β prominent notice: "i changed these files" + the date of any change. put a timestamp on it, bestie π
b) You must cause any work that you distribute or publish, that in
whole or in part contains or is derived from the Program or any
part thereof, to be licensed as a whole at no charge to all third
parties under the terms of this License.
b)β anything you distribute or publish that contains or derives from the Program (whole or in part) gets licensed as a whole, at no charge, to all third parties, under these terms. the whole thing. not just your bits π
c) If the modified program normally reads commands interactively
when run, you must cause it, when started running for such
interactive use in the most ordinary way, to print or display an
announcement including an appropriate copyright notice and a
notice that there is no warranty (or else, saying that you provide
a warranty) and that users may redistribute the program under
these conditions, and telling the user how to view a copy of this
License. (Exception: if the Program itself is interactive but
does not normally print such an announcement, your work based on
the Program is not required to print an announcement.)
c)β if it's one of those interactive, reads-commands-when-run programs, then on the most ordinary startup it has to print/display an announcement with: an appropriate copyright notice, the no-warranty notice (or a note that you provide a warranty), that users may redistribute under these conditions, and how to view a copy of this License. and there's an exception β if the Program is interactive but doesn't normally print such an announcement, your work based on it doesn't have to either π
These requirements apply to the modified work as a whole. If
identifiable sections of that work are not derived from the Program,
and can be reasonably considered independent and separate works in
themselves, then this License, and its terms, do not apply to those
sections when you distribute them as separate works. But when you
distribute the same sections as part of a whole which is a work based
on the Program, the distribution of the whole must be on the terms of
this License, whose permissions for other licensees extend to the
entire whole, and thus to each and every part regardless of who wrote it.
okay this is the nuance paragraph, don't skip it: the requirements apply to the modified work as a whole. if some identifiable sections genuinely aren't derived from the Program and can reasonably be considered independent separate works, then this License doesn't apply to those when you distribute them as separate works. but the second you distribute those same sections as part of a whole that's a work based on the Program, the whole distribution has to be on these terms β and the permissions for other licensees stretch to the entire whole, every single part, no matter who wrote it. no vibes-based carve-outs π
Thus, it is not the intent of this section to claim rights or contest
your rights to work written entirely by you; rather, the intent is to
exercise the right to control the distribution of derivative or
collective works based on the Program.
to be clear (they said it, not me): this section is not trying to claim rights over or contest your rights to stuff you wrote entirely yourself. the intent is controlling distribution of derivative or collective works based on the Program. read it right, bestie πΈ
In addition, mere aggregation of another work not based on the Program
with the Program (or with a work based on the Program) on a volume of
a storage or distribution medium does not bring the other work under
the scope of this License.
mere aggregation on a storage/distribution medium β pulling the other work under this License. just because they're on the same disk doesn't mean they're dating π
β¨ 3 β¨
3. You may copy and distribute the Program (or a work based on it,
under Section 2) in object code or executable form under the terms of
Sections 1 and 2 above provided that you also do one of the following:
object code / executable distribution is fine under Sections 1 and 2 β if you also do one of these three:
a) Accompany it with the complete corresponding machine-readable
source code, which must be distributed under the terms of Sections
1 and 2 above on a medium customarily used for software interchange; or,
a)β ship the complete corresponding machine-readable source code with it, distributed under Sections 1 and 2 on a medium customarily used for software interchange. bring the source, basically π§
b) Accompany it with a written offer, valid for at least three
years, to give any third party, for a charge no more than your
cost of physically performing source distribution, a complete
machine-readable copy of the corresponding source code, to be
distributed under the terms of Sections 1 and 2 above on a medium
customarily used for software interchange; or,
b)β or a written offer, valid at least three years, to give any third party a complete machine-readable copy of the corresponding source code, for a charge no more than your cost of physically performing source distribution, distributed under Sections 1 and 2 on a medium customarily used for software interchange. three years minimum, cap the charge at cost. write it down βοΈ
c) Accompany it with the information you received as to the offer
to distribute corresponding source code. (This alternative is
allowed only for noncommercial distribution and only if you
received the program in object code or executable form with such
an offer, in accord with Subsection b above.)
c)β or pass along the info you received about the offer to distribute corresponding source code. head's up though: this one's only for noncommercial distribution, and only if you got the program in object code or executable form with such an offer, in accord with Subsectionb)above. read the fine print fr fr π
The source code for a work means the preferred form of the work for
making modifications to it. For an executable work, complete source
code means all the source code for all modules it contains, plus any
associated interface definition files, plus the scripts used to
control compilation and installation of the executable. However, as a
special exception, the source code distributed need not include
anything that is normally distributed (in either source or binary
form) with the major components (compiler, kernel, and so on) of the
operating system on which the executable runs, unless that component
itself accompanies the executable.
defining "source code" properly: the preferred form of the work for making modifications to it. for an executable, "complete source code" = all source for all modules it contains + any associated interface definition files + the scripts used to control compilation and installation of the executable. that's the full package π¦
special exception though: you don't need to include anything normally distributed (source or binary) with the major components β compiler, kernel, and so on β of the OS the executable runs on... unless that component itself accompanies the executable. read that twice π
If distribution of executable or object code is made by offering
access to copy from a designated place, then offering equivalent
access to copy the source code from the same place counts as
distribution of the source code, even though third parties are not
compelled to copy the source along with the object code.
handy shortcut: if you distribute the executable/object code by offering access to copy from a designated place, then offering equivalent access to copy the source from the same place counts as distributing the source. even though third parties aren't compelled to copy the source along with the object code. convenient! β¨
β¨ 4 β¨
4. You may not copy, modify, sublicense, or distribute the Program
except as expressly provided under this License. Any attempt
otherwise to copy, modify, sublicense or distribute the Program is
void, and will automatically terminate your rights under this License.
However, parties who have received copies, or rights, from you under
this License will not have their licenses terminated so long as such
parties remain in full compliance.
the serious one β οΈ no copying, modifying, sublicensing, or distributing the Program except as expressly provided under this License. any attempt otherwise is void and automatically terminates your rights under this License. that's not a warning, that's the mechanism. π
the good news: parties who received copies or rights from you under this License don't get their licenses terminated β as long as they stay in full compliance. your mess doesn't nuke your friends' licenses π«Ά
β¨ 5 β¨
5. You are not required to accept this License, since you have not
signed it. However, nothing else grants you permission to modify or
distribute the Program or its derivative works. These actions are
prohibited by law if you do not accept this License. Therefore, by
modifying or distributing the Program (or any work based on the
Program), you indicate your acceptance of this License to do so, and
all its terms and conditions for copying, distributing or modifying
the Program or works based on it.
nobody's forcing you to accept it β you didn't sign anything. but nothing else gives you permission to modify or distribute the Program or its derivative works, and those actions are prohibited by law if you don't accept. so the moment you modify or distribute the Program (or any work based on it), you're indicating acceptance of this License and all its terms for copying, distributing, or modifying it. consent via action, basically π€
β¨ 6 β¨
6. Each time you redistribute the Program (or any work based on the
Program), the recipient automatically receives a license from the
original licensor to copy, distribute or modify the Program subject to
these terms and conditions. You may not impose any further
restrictions on the recipients' exercise of the rights granted herein.
You are not responsible for enforcing compliance by third parties to
this License.
every single time you redistribute the Program (or a work based on it), the recipient automatically gets a license from the original licensor to copy, distribute or modify it under these terms. automatic. no paperwork needed π
and you may not impose any further restrictions on the recipients exercising the rights granted here β that's the whole point, no extra locks on the door. last bit: you are not responsible for enforcing third parties' compliance with this License. not your job, not your problem, go live your life π
7. Okay so boom β if a court judgment, or a patent infringement allegation, or literally any other reason (and nope, not just patent issues, bestie) imposes conditions on you β whether by court order, by agreement, or otherwise β and those conditions contradict the conditions of this License? That does not excuse you from the conditions of this License. Periodt. π If you can't distribute in a way that satisfies your obligations under this License and any other pertinent obligations at the same time, then as a consequence you may not distribute the Program at all. Example time: if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. π
If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply, and the section as a whole is intended to apply in other circumstances.
And a little vibe check on intent, because this matters: it is not the purpose of this section to induce you to infringe any patents or other property right claims, or to contest validity of any such claims. The section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it's up to the author/donor to decide if he or she is willing to distribute software through any other system, and a licensee cannot impose that choice. β¨ This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.
8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries β so distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. π iykyk.
9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Those new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. New drop, same vibes. π¦
Each version gets a distinguishing version number. If the Program specifies a version number of this License that applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. Pick your fighter. π
10. Wanna fold parts of the Program into other free programs whose distribution conditions are different? Write to the author and ask for permission. For software copyrighted by the Free Software Foundation, write to the Free Software Foundation; they sometimes make exceptions for this. And the decision is guided by two goals, iconic behavior honestly: preserving the free status of all derivatives of the free software, and promoting the sharing and reuse of software generally. π
π NO WARRANTY π
11. What it says on the tin, and we're doing it in caps because it's serious: BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. Except when otherwise stated in writing, the copyright holders and/or other parties provide the Program "AS IS" without warranty of any kind, either expressed or implied β including, but not limited to, the implied warranties of MERCHANTABILITY and FITNESS FOR A PARTICULAR PURPOSE. The entire risk as to the quality and performance of the Program is with you. Should the Program prove defective, you assume the cost of all necessary servicing, repair or correction. No cap, that's the deal. π«Ά
π NO LIABILITY π
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING will any copyright holder, or any other party who may modify and/or redistribute the Program as permitted above, be liable to you for damages β including any general, special, incidental or consequential damages arising out of the use or inability to use the Program (including but not limited to loss of data or data being rendered inaccurate, or losses sustained by you or third parties, or a failure of the Program to operate with any other programs) β even if such holder or other party has been advised of the possibility of such damages. π
π END OF TERMS AND CONDITIONS π
β¨ How to Apply These Terms to Your New Programs β¨
So you're building something new and you want it to be of the greatest possible use to the public? Slay. The best way to achieve this is to make it free software which everyone can redistribute and change under these terms. π
To do so, attach the following notices to the program. It's safest to attach them to the start of each source file to most effectively convey the exclusion of warranty, and each file should have at least the "copyright" line and a pointer to where the full notice is found.
<one line to give the program's name and a brief idea of what it does.>
Copyright (C) <year> <name of author>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
Also add information on how to contact you by electronic and paper mail. π¬
If the program is interactive, make it output a short notice like this when it starts in an interactive mode:
Gnomovision version 69, Copyright (C) year name of author
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
The hypothetical commands show w' and show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than show w' and show c' β they could even be mouse-clicks or menu items β whatever suits your program. π±οΈ
You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here's a sample; alter the names:
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
`Gnomovision' (which makes passes at compilers) written by James Hacker.
<signature of Ty Coon>, 1 April 1989
Ty Coon, President of Vice
This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Library General Public License instead of this License. π
π₯ eXosip2 (5.3.0) - 2021-11-22 π₯
- socket error management got a glow-up: rewritten in order to apply them to all pending ICT and NICT transactions β with previous code, some transactions won't see the transport-error and will fail with unnecessary delay. π€
- add time information in
cb_xixt_kill_transactioncallback for debugging π eXosip_lockwill now include read on sockets[TLS]allow to accept wildcard with a new bit intls_verify_client_certificate[TLS]disable loading OS certifiate with a new bit intls_verify_client_certificate(that spelling is the original's, love it, keeping it π )[TLS]I beleive there is no reason to cut packet in 500 bytes chunks on ios (again: their spelling, their truth β¨)[EXOSIP_OPT_SET_CONTACT_DIALOG_EXTRA_PARAMS]new option to set Contact parameters in request/answers dialogs[AMSIP_OPTION_SET_SIP_INSTANCE]allow any value inside+sip.instanceinstead of onlyurn:uuid[epoll]fixeXosip_event_waitwhen using epoll implementation where events are distributed in the nexteXosip_event_waitcall
π¦ eXosip2 (5.2.1) - 2020-05-21 π¦
[ENABLE_MAIN_SOCKET]fix epoll mechanism for server socket with TCP and TLS[crash]check scheme upon processing 3xx[ssl]fix to be compatible with libressl[ssl]https://savannah.nongnu.org/patch/?10046compatibility with openssl below1.1.0- fix when
Content-Typeindicatesapplication/sdp, but there is no body [TLS]modify the code for TLS validation in order to improve logs and details on the connection- use
time_tinstead ofintforr_retry_after_delayvariable[fix 1367a34ca commited on March 1st] eXosip_default_actionwill returnOSIP_RETRY_LIMITwhen limit is reached- make sure to obey the
Retry-Afterheader fromREGISTERreply - use newer
osip_timersubMACRO [bug#60024]fix openssl usage to always use callback mode for private key password, even when missingeXosip_reset_transportswas not effective any more since[5.1.2][commit 705643fa 2020-07-07][do not use unless you understand it]β bestie, that bracketed warning is doing a LOT of heavy lifting here π[windows]aHANDLEis leaked when loading trusted certificates- dp layer: handle
WSAEMSGSIZEwhen buffer is too short for complete incoming messag - cleaner code to retreive an SDP from a SIP message
- fix crash when
ENABLE_MAIN_SOCKETis defined and epoll is used
πΈ eXosip2 (5.2.0) - 2020-11-10 πΈ
- fix memory and socket leak
[major][affected TCP, TLS, UDP: since 5.1.2, need update asap]β genuinely, update asap, this one's not a drill π¨ - fix to make sure a non yet established TLS descriptor with read descriptor set will be processed when no outgoing transaction is in a state to handle it
[since 5.1.2] - fix SRV rotation for TLS
[was rotating TCP records instead of TLS][since 5.1.2] - fix duplicate packets for TCP and TLS when several outgoing NICT are happening at the same time
[since 5.1.2] - add outbound proxy parameter in
sip_monitortool - ABI update: modification of
"eXosip_tls_ctx_t"β extend the structure to set:- cipher list
- add TLS openssl flags (to disable
TLSv1,TLSv1.1, etc...) - add DTLS openssl flags (to disable
DTLSv1, etc...)
π eXosip2 (5.1.3) - 2020-08-25
EXOSIP_OPT_FORCE_CONNECTIONREUSEβ brand new option bestie, it forces reuse of an already-established socket for ACK and dialog messages πtlsβ fixed building the DH parameter with 5.1.2 andopenssl < 1.1.0
β¨ eXosip2 (5.1.2) - 2020-08-20
tlsβ now uses RFC 5114 dh param at 2048 bits size πΈtlsβ uses 2048 bits for ephemeral RSA key generationtlsβ usesSSL_OP_NO_COMPRESSIONto make sure it's actually disabledtlsβ usesSSL_OP_NO_TICKETto disable tickettlsβ uses theHIGH:!COMPLEMENTOFDEFAULT:!kRSA:!PSK:!SRPcipher list for higher security and fewer ciphers π₯- fixed a possible race condition in the sample code
[sip_reg and sip_monitor] - new format style using
clang-format - reduced and rewrote the logs for readability
- fixed the broken epoll implementation. DO NOT USE 5.1.1 with epoll π
- rewrite of UDP/TCP/TLS (and DTLS, untested) for both
selectandepollmode. Complete rewrite of socket (c-aresand UDP/TCP/TLS) in order to accelerate socket establishment, and to correctly handle socket failure. The change also helps recover faster after a socket failure and switch to the next SRV record available β that last feature was previously broken, ngl - Fix NAPTR/SRV on windows when CARES is not used. (not advised) π
- ACK sent out of transaction with no existing connection may be sent later. (TCP/TLS)
- Upon TLS loss, try to use domain or NAPTR SNI when the TLS connection is not initiated by an outgoing transaction.
sip_monitorβ new tool to monitor sip service π- add support for authentication using SHA-256 (openssl required)
- only use the first supported proposed authentication when the same realm is used
- fix: upon UDP errors, like ICMP, buffer size may reach abnormal values (avoid useless reallocation)
π¦ eXosip2 (5.1.1) - 2020-01-16
- new API β generate random string (low entropy, only hexa):
int eXosip_hexa_generate_random(char *val, int val_size);
- generate random string (high entropy when compiled with openssl):
int eXosip_byte_generate_random(char *val, int val_size)
- provide more entropy with
eXosip_byte_generate_random(with openssl when available) β¨ - fix TLS security issue reported by Alexander Traud regarding hostname validation when using NAPTR/SRV π
- add support for epoll (detected by configured)
// becomes the default on linux platforms with autotools - fix bug #56839: The cnonce should not be static
-this is identified as replay attack by some services-. - fix tcp and tls connection failure detection (accelerate error detection and recovery)
- fix: fixed a crash with DTLS
π eXosip2 (5.1.0) - 2019-03-27
- minor API update β API parameter change:
eXosip_call_build_ack/eXosip_call_send_ackAPI to usetidinstead ofdidas parameter. - new API β add an API to insert one extra header in BYE:
int eXosip_call_terminate_with_header(struct eXosip_t *excontext, int cid, int did, const char *header_name, const char *header_value);
void eXosip_dnsutils_release(struct osip_naptr *naptr_record);
which is required after usage of eXosip_dnsutils_naptr. π«Ά
- new OPTION β
EXOSIP_OPT_SET_SESSIONTIMERS_FORCEoption to force session timer to be used when the remote side does not support it. - structure change β new param in
eXosip_tls_credentials_tfor pinning:"public_key_pinned". A file with the expected public key of server. If you useeXosip_tls_ctx_t/eXosip_tls_credentials_t/EXOSIP_OPT_SET_TLS_CERTIFICATES_INFO, you need to recompile π - fix processing response out of transaction. (avoid incorrect logs and extra work)
- fix
https://savannah.nongnu.org/bugs/?54628where ACK was only retransmitted for initial outgoing INVITE.- fix: retransmit ACK for both initial INVITE and re-INVITE.
- fix: retransmit ACK for 2xx from forking (with a BYE) even if call does not exist.
- ACK for "old transaction" within the established dialog won't be retransmitted because the parameter only hold the latest ACK.
- fix bug report:
https://savannah.nongnu.org/bugs/index.php?54624- another patch to fix more issue related to cseq & PRACK.
- The newer code better handle forking use-case with PRACK.
- The newer code better handle several 1xx from same user.
- fix bug report:
https://savannah.nongnu.org/bugs/index.php?54624cseq wasn't increasing after a PRACK. - improve portability code, detection of headers, windows compilation detection,
sockaddr_storagewas not correctly defined. - fix udp layer: set
ipbufbefore using it. - fix: allow socket descriptor to be
0(posix requirement). - fix: compile with any openssl version.
- allow compilation with
OPENSSL_NO_DH,OPENSSL_NO_RSA,OPENSSL_NO_ECDHand/orOPENSSL_NO_DEPRECATED. - remove old windows specific RSA obsolete code.
- add in
eXtl_tls.csome explanations on usage of TLS with eXosip2. READ THEM. π - improve reliability for naptr/srv lookup (but still a short time).
- fix/improve
_eXosip_mark_registration_expired: it was working correctly only if registration had previously failed. - fix: attach call/dialog to CANCEL transaction (so
EXOSIP_CALL_MESSAGE_ANSWEREDwill be received instead ofEXOSIP_MESSAGE_ANSWERED). - windows: fix
DnsQueryto use UTF8 even if compiled without UNICODE (not applicable if you use c-ares). - windows: add ENUM capability and improve NAPTR/SRV record (not applicable if you use c-ares).
- windows: you should use c-ares AND you should compile with UNICODE. (much better) π
- add ability to define a dnsserver when doing NAPTR and SRV record (c-ares only).
- format of domain string for
"eXosip_dnsutils_naptr"is"domain.com!+AUS|IP_DNSSERVER". - fix for on android, DNS are not available any more (restricted access) (c-ares only).
- add support ENUM and regex for
res_queryAPI (not applicable if you use c-ares). - sync with newer osip: use newer
osip_naptr&osip_srv_recordstructures to hold ENUM sip result and improvements to retrieve (and release) it viaeXosip_dnsutils_naptrandeXosip_dnsutils_releaseAPIs. - TLS improvements: simplify client and server config, add ECDH cipher suite if missing, password for private key is optional, add support for public key pinning. π
- improve to report
EXOSIP_CALL_NOANSWERupon transport error for INVITE for faster detection. - fix possible memory leak for X509 server certificate.
- fix crash if dialog has been already closed between 200ok and a received BYE.
- improve windows pipe replacement (use a free allocated port automatically).
- fix to optimize detection of TCP or TLS establishment, fix to optimize sending REGISTER after establishment.
- patch for call transfer to keep dialog after BYE, in order to be able to handle incoming/outgoing NOTIFY within calls after BYE.
- handle incoming UPDATE from alternative dialogs in early dialog mode.
- fix to reject any NOTIFY without established dialog coming later than 64 seconds after initial SUBSCRIBE.
- After a NAPTR query, some DNS server returns SUCCESS without NAPTR answers. In such use-case, fallback to manual SRV records.
- add
SOCK_CLOEXECoption to sockets// add missing SO_KEEPALIVE options on TLS socket. EXOSIP_OPT_ENABLE_IPV6now support0(ipv4 only),1(ipv6 only) and2(ipv4 OR ipv6). With option2, choice is made based on DNS and the stack can fallback between IPv4 and IPv6. π- fix possible memory leak when using wrong
tidforeXosip_insubscription_send_answer. - fix possible memory leak upon allocation error.
- fix leak upon syntax error in parameters provided for PUBLISH.
- fix leak upon syntax error in parameters provided for REGISTER.
- increase size of
proto_ifsfor IPv6 local address. - RFC 2617 erratum: Errata ID: 1649 (minor issue).
_exosip_isipv4addr: fix checking IPv4 address (minor issue).- other minor updates.
β eXosip2 (5.0.0)
- major API update β add a new parameter to
eXosip_call_build_prackin order to create the PRACK for this specific response and not for the latest. - major API update β removal of
eX_refer.hAPI. REFER are now handled with subscriptions APIs.eXosip_refer_build_requestremovedeXosip_refer_send_requestremoved
- major API update β subscription now handle both SUBSCRIBE and REFER with the same APIs:
eXosip_subscription_build_initial_refer ADDED
eXosip_subscribe_build_initial_request renamed eXosip_subscription_build_initial_subscribe
eXosip_subscribe_send_initial_request renamed eXosip_subscription_send_initial_request
eXosip_subscribe_build_refresh_request renamed eXosip_subscription_build_refresh_request
eXosip_subscribe_send_refresh_request renamed eXosip_subscription_send_refresh_request
eXosip_subscribe_remove renamed eXosip_subscription_remove
and EXOSIP_IN_SUBSCRIPTION_* and EXOSIP_SUBSCRIPTION_* events may now relate to REFER subscription.
- major API change β
eXosip_automatic_refreshis obsolete and has been removed. Only useeXosip_automatic_actioninstead π - API update:
eXosip_options_send_requestreturns a positive transaction id (tid) on success.eXosip_publishreturns a positive transaction id (tid) on success.- note:
eXosip_message_send_requestwas already returning the transaction id (tid) on success.
- new API options:
EXOSIP_OPT_REMOVE_PREROUTESET: to keep Route SetEXOSIP_OPT_SET_SIP_INSTANCE: define+sip.instanceparameter in Contact headersEXOSIP_OPT_ENABLE_USE_EPHEMERAL_PORT: option to use/not use ephemeral port in Contact.EXOSIP_OPT_ENABLE_REUSE_TCP_PORT: option to reuse port.EXOSIP_OPT_AUTO_MASQUERADE_CONTACT: option to enable automatic masquerading for Contact headers.EXOSIP_OPT_UDP_LEARN_PORT: obsolete and will be removed in the future.EXOSIP_OPT_SET_DEFAULT_CONTACT_DISPLAYNAME: define a display name to be added in Contact headers
- new API options: (high load traffic use-case: DO NOT USE FOR COMMON USAGE) π
EXOSIP_OPT_SET_MAX_MESSAGE_TO_READ: set the number of message to read at once for each network processing.EXOSIP_OPT_SET_MAX_READ_TIMEOUT: set the period in nano seconds during we read for sip message.EXOSIP_OPT_GET_STATISTICS: retrieve numerous statistics.
- rewrite/update autotools and
./configureoptions
--enable-pthread=[autodetect|force]
autodetect POSIX threads or force -DHAVE_PTHREAD [default=autodetect]
--enable-semaphore=[autodetect|semaphore|sysv]
select your prefered semaphore [default=autodetect].
- fix the selection of the
Contactheader for 3xx β it defaults to atel/sip/sipsone with any transport π«Ά - keep the call context around long enough to actually handle redirection, bestie
- fix a race condition for processing SRV results (not likely to happen, but like⦠it could)
- fix the bug when reading a SIP message longer than 8000 over UDP and TLS π
- improve
eXosip_add_authentication_infoso it stops creating duplicate credentials - if a
SUBSCRIBEgets rejected, the context gets released automatically now, periodt - add failover after a DNS failure β¨
- fall back to SRV even if we get a
NOTFOUNDreply for NAPTR - fix the route set with a strict router
- rename the usage of
-DHAVE_CARES_Hinto-DHAVE_ARES_H, which is the real name of the header, iykyk - remove warnings, mostly the ones from the socket API (
getnameinfo/bind/accept/recv/connect/sendto) - rewrite all the loops using an iterator for better performance (super useful for high load traffic π₯)
- rewrite Via and Contact management: both now contain the IP of the real network interface instead of the default one
- improve NAPTR failover, it's more reliable now // and add failover for
503answers - improve the interval that forces a
REGISTERrefresh on network error and failover - improve TCP socket management
- add a callback to simplify/optimize/accelerate the usage of wakelocks in an android application using exosip2 π
- improve TLS, add
TLSv1.1,TLSv1.2, disable the weak cipher (FREAK) and enable ECDHE cipher π - add support for the SNI tls extension (
openssl 1.0.2) - add try/except on windows to catch a possibly missing qwave (windows server)
- implement a timeout (32 seconds) for establishing a TCP and TLS connection
- if a connection is failing, report the failure asap
- fix a memory leak in
eXosip_call_get_referto - remove the extra connect on the socket for TCP and TLS (not allowed for a tcp stream, no cap)
- fix it so an INVITE retransmission with the same branch, received after the original INVITE was replied, is correctly discarded
- add
WSACleanupfor eachWSAStartupcall (windows) - do not include contact in
BYEandCANCEL - fix it to use
sipswhen appropriate (inContact) - fix it to avoid handling a negative
content-lengthπ - do not start naptr for incoming transactions
- fix the bug when rseq is empty but exists
- add support for QOS on windows
- improve connection handling / failure detection and the keep alive options, in TLS, TCP, UDP
- update the static IDs (
cid/did/rid/pid) to use the range from0toINT_MAXso collisions stop being a thing - other minor updates.
eXosip2 (4.1.0) π
- improve the timer and use
UPDATEif it's advertised,INVITEotherwise - improve
PRACKsupport - option to disable the automatic BYE answer
- option to enable/disable IPv6 per
eXosip_tinstance - option to disable the DNS cache
- improve network support for several
eXosip_tinstances- keepalive setting is per instance
- ipv4/ipv6 setting is per instance
- improve the network setting to avoid conflict upon transport change
- fix
tcpandtlsconnect()for slow connections - use
TCP_NODELAYon more platforms - use the
Authorizationheader for401// simplify the authentication code - minor expires improvements for
REGISTER - copy call-info over a
SUBSCRIBErefresh - allow more TLS errors if verification is disabled
- fix it if there's NO NAPTR available
- add support for Windows Phone 8
- fix it to use the cache for TCP and TLS
- fix possible leaks on implementation errors
- add TSC experimental support
eXosip2 (4.0.0) π¦
- modify the configuration APIs to use
eXosip_set_option - fix the bug: do not create a new
PRACKif it already exists for an answer - update to the latest osip // test time compensation for android
- use an ephemeral port in the standard TCP and TLS version
- return the tid number so we can match the response event
- use a system independent time for
osip_gettimeofdayon the unix platform - major API update: several
"struct eXosip_t"can be handled at the same time. This can be used to have several transport layers running at the same time π«Ά - many tiny other changes
eXosip2 (3.6.0) πΈ
- use the optional c-ares DNS library for non blocking DNS access, plus improvements over DNS operations like NAPTR and SRV records
- again, so many minor changes/fixes/improvements, sorry for not being able to have a history here⦠the git on savannah will bring you all the details!
eXosip2 (3.5.0) π
- iphone with TCP/TLS background support
- android support
- a lot of minor changes/fixes/improvements, sorry for not being able to have a history hereβ¦
eXosip2 (3.4.0) β¨
- modification to allow using the "windows certificate store" for TLS
- handle keep alive for TCP/TLS
- fix when receiving additional CRLF on a reliable transport
- modification to allow a non-blocking socket for reliable transport (TLS/TCP)
- fix the tag issue with an application where the tag is missing
- fix compilation for mingw
- fix the
Contactheader in a request within a dialog for non-udp protocol - fix some DNS issue with vista?
- remove the
481auto answer for an unsolicitedNOTIFY - fix the static id range
- initial code for TCP fragmentation
- osip_list prototypes and warnings fix
- fix transport matching for redirection using a transport other than udp
eXosip2 (3.3.0) π§
- fix when
200okincludes a contact with an empty line parameter - fix for a replaces header longer than
256char - fix SRV record with more than
10answers - sort SRV record
- option to disable NAPTR requests
eXosip2 (3.2.0) π
- improve TLS support and add an API for ssl information & files
- return a new error code for all API
- remove automatic answers to
PRACK(it must be done in the application now) - remove automatically outgoing non established subscriptions
eXosip2 (3.1.0) π
- AKA authentication
- improve compliance & flexibility
eXosip2 (3.0.4) π
- fix building
SUBSCRIBErefresh - fix a compliance issue with the refer-to to-tag/from-tag parameters
- fix the bug for retransmissions or ACK with a proxy that resolves to several IP
- handle the
"expires"parameter to update the registration interval - handle the
"expires"parameter to update the publication interval - handle automatically publish refresh, and some error codes (
423)
eXosip2 (3.0.3) π
- add TLS support
- rewrite transport layer
- add the
line=parameter in Contact headers for registrations - a few changes related to interop. issues
- add missing
*_REQUESTFAILUREevents on no answer - update the registration interval when the
Expiresheader is in200ok
eXosip2 (3.0.2) β
- fix the call transfer issue with the
"Replaces"header - allow build/run eXosip in a non-threaded model (without
-DOSIP_MT) - initial support for ucos
- add support for qop authentication
- remove the registration context immediately upon
eXosip_register_remove - TCP: fix missing
Contactin the sentINVITE - TCP: fix missing
"transport"inContactfor answers within a dialog - TCP: fix possible race conditions
eXosip2 (3.0.1) π
- add Windows CE support with Visual Studio 2005 (
WM5.0, PocketPC 2003/2005, Smartphone) - update to
osip2-3.0.1 - add SRV record capabilities
- add new OPTIONS: do not send
101, remove pre-route set from message
eXosip2 (2.2.3) π
- announce
NOTIFYanswers to the application - fix authentication bugs from the previous patch
- fix a TCP bug
- fix using code
699
eXosip2 (2.2.2) π¦
- new version synchronized with osip2
- total rewrite of eXosip
- -> new API for more flexibility
- -> media negotiation must now be handled outside of eXosip2
eXosip (0.9.1) πΈ
- add publish support through a nice API
eXosip (0.9.0) π
- improve presence support (busy, away, onthephoneβ¦)
- new
eXosip_automatic_refresh()to refreshSUBSCRIBEandREGISTER - fix dialog establishment when receiving
NOTIFYs - this ChangeLog has not been updated seriously⦠many changes
- have been done but they don't appear here. Sorry.
- status of libexosip:
- call transfer : OK
- redirection of calls (3XX) : OK
- SUB/NOTIFY for presence : nearly OK (usable)
- authenthication (REGISTER and INVITE only) : ok
eXosip (0.8.0) β¨
- fix processing of
180 Ringing? - fix the bug when
BYEis processed before a 2xx forINVITE
eXosip (0.7.7) π§
- memory leaks
- tiny bugs, code clean-up
eXosip (0.7.6) π
- fix the bug when the 1st proxy is using strict routing
- support for IPv4 and IPv6
- do not send
180 Ringingany more on newINVITEs - close correctly rtp streams in josua
- improve the
eXosip_event_waitmethod - performance updated on win32 for event handling
eXosip (0.7.5) π
- small improvements for josua
- patch for IPv6 (uncomplete)
- patch for authentication
- improve the
configure.infile - allow a fancy reason phrase in a SIP answer
- allow NAT traversal (firewall IP in SDP packet)
eXosip (0.7.3) π
- warning fix
- support for multiple registrations
- support for authentifications for
REGISTER
eXosip (0.7.2) π
- add RTP support with the common ucl library
- fix some memory leak
- improve the facility to change the
local_sdp_port - add an event when the ACK for 2xx is received
eXosip (0.7.1) β
- rewrite of header files and new directory architecture
- support for
INFOandOPTIONSwithin calls - support for AUDIO
eXosip (0.6.3) π
- use of the event oriented interface in josua
eXosip (0.6.2) π¦
- new Event oriented interface with applications
- support for both MSN or compliant UAs
SUBSCRIBE/NOTIFYfor SIMPLE support- script for adding/updating subscribers (
eXosip_addsubscriber.sh)
eXosip (0.6.1) πΈ
INVITE,CANCEL,BYE,REGISTER,MESSAGE,REFER- script for adding/updating contact (
eXosip_addfreind.sh) - script for adding/updating identity (
eXosip_addidentity.sh) - NCURSES interface
- options for current session
okay bestie that's literally the whole history, from 0.6.1 all the way up to the big 5.3.0 era, and you ate every single line of it π
this whole glow-up is from Version 5.3.0, dated Thu May 18 2023 β go off, eXosip2_license(3) π«Άβ¨
π¦ where this page comes from
- epel 9: libeXosip2-devel 5.3.0-2.el9 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms