res_stir_shaken: Add "ignore_sip_date_header" config option.

UserNote: A new STIR/SHAKEN verification option "ignore_sip_date_header" has
been added that when set to true, will cause the verification process to
not consider a missing or invalid SIP "Date" header to be a failure.  This
will make the IAT the sole "truth" for Date in the verification process.
The option can be set in the "verification" and "profile" sections of
stir_shaken.conf.

Also fixed a bug in the port match logic.

Resolves: #1251
Resolves: #1271
This commit is contained in:
George Joseph
2025-06-15 14:43:13 -06:00
parent b5a04ed7ac
commit 6b107e90f3
8 changed files with 48 additions and 20 deletions

View File

@@ -330,6 +330,13 @@ considered "failed".
Default: 15
-- ignore_sip_date_header ---------------------------------------------
When set to true, will cause the verification process to not consider a
missing or invalid SIP "Date" header to be a failure. This will make
the IAT the sole "truth" for Date in the verification process.
Default: no
-- max_date_header_age ------------------------------------------------
The sender MUST also send a SIP Date header in their request. If we
receive one that is older than the current time by the number of seconds