@@ -34,7 +34,8 @@ Daniel-Constantin Mierla

         4. Functions

               4.1. secsipid_check_identity(keyPath)

-              4.2. secsipid_add_identity(origTN, destTN, attest, origID,

+              4.2. secsipid_check_identity(pubkeyVal)

+              4.3. secsipid_add_identity(origTN, destTN, attest, origID,

                       x5u, keyPath)

         5. Installation

@@ -46,8 +47,9 @@ Daniel-Constantin Mierla

    1.3. Set cache_dir parameter

    1.4. Set cache_expire parameter

    1.5. secsipid_check_identity usage

-   1.6. secsipid_add_identity usage

-   1.7. Libsecsipid usage

+   1.6. secsipid_check_identity_pubkey usage

+   1.7. secsipid_add_identity usage

+   1.8. Libsecsipid usage

 Chapter 1. Admin Guide

@@ -69,7 +71,8 @@ Chapter 1. Admin Guide

    4. Functions

         4.1. secsipid_check_identity(keyPath)

-        4.2. secsipid_add_identity(origTN, destTN, attest, origID, x5u,

+        4.2. secsipid_check_identity(pubkeyVal)

+        4.3. secsipid_add_identity(origTN, destTN, attest, origID, x5u,

                 keyPath)

    5. Installation

@@ -155,7 +158,8 @@ modparam("secsipid", "cache_expire", 7200)

 4. Functions

    4.1. secsipid_check_identity(keyPath)

-   4.2. secsipid_add_identity(origTN, destTN, attest, origID, x5u,

+   4.2. secsipid_check_identity(pubkeyVal)

+   4.3. secsipid_add_identity(origTN, destTN, attest, origID, x5u,

           keyPath)

 4.1.  secsipid_check_identity(keyPath)

@@ -186,7 +190,32 @@ request_route {

    header and payload using {s.select} and {s.decode.base64t}

    transformations together with jansson module.

-4.2.  secsipid_add_identity(origTN, destTN, attest, origID, x5u, keyPath)

+4.2.  secsipid_check_identity(pubkeyVal)

+

+   Similar to secsipid_check_identity() with the public key value provided

+   in the parameter.

+

+   The parameters can contain pseudo-variables.

+

+   This function can be used from ANY_ROUTE.

+

+   Example 1.6. secsipid_check_identity_pubkey usage

+...

+request_route {

+  ...

+  http_client_query("https://provider.com/stir-shaken/cert.pem", "$var(pubkey)")

+;

+  ...

+  if(secsipid_check_identity_pubkey("$var(pubkey)")) { ... }

+  ...

+}

+...

+

+   Further checks can be done with config operations, decoding the JWT

+   header and payload using {s.select} and {s.decode.base64t}

+   transformations together with jansson module.

+

+4.3.  secsipid_add_identity(origTN, destTN, attest, origID, x5u, keyPath)

    Add Identity header using the key specified by "keyPath" to sign the

    JWT body. If origID is empty, a UUID string is generated to fill the

@@ -200,7 +229,7 @@ request_route {

    This function can be used from ANY_ROUTE.

-   Example 1.6. secsipid_add_identity usage

+   Example 1.7. secsipid_add_identity usage

 ...

 request_route {

     ...

@@ -224,7 +253,7 @@ request_route {

    installed and its environment configured, then run the following

    commands:

-   Example 1.7. Libsecsipid usage

+   Example 1.8. Libsecsipid usage

 ...

 go get https://github.com/asipto/secsipidx

 cd $GOPATH/src/github.com/asipto/secsipidx/csecsipid/