Release Notes

The main contents of this release is improved management of SIP trunks and full support for secure SIP trunks: it is possible to configure them easily, test configuration and monitor their status.

In addition, Root Certificate Authority are full managed via web console.

Support for clients based on Java5 that uses SSL2Hello message to negotiate SSLv3 or TLS1.0 connections: SSLv2 is anyway disabled.

This version clean up SIP sessions table

PrivateServer - 2.5.4398

New Features

• [PS-1050] - Administrator can configure a secure trunk
• [PS-1052] - Trunk configuration can be tested to verify configuration
• [PS-1053] - Current SIP trunk status is reported in realtime management section, under relaxed permissions
• [PS-1222] - Manage the appliance Certification Authority list
• [PS-1391] - Added support for NEXMO SMS Gateway

Improvements

• [PS-1077] - Registered accounts page offers a link to accunt details page
• [PS-1121] - Installation/provisioning message logs provide more meaningful information
• [PS-1215] - Digital certificates expiration date is shown
• [PS-1301] - "Restart required" message is now much more visible to the user
• [PS-1303] - Improved log rotation for Tomcat service
• [PS-1325] - Improves instructions for account batch import
• [PS-1378] - Cleanup SIP session log from watchdog sessions 
• [PS-1372] - Added compatibility for SSL2Hello clients (based on Java 5), such as Blackberry Enterprise Server 4.x
• [PS-1358] - Improved CDR log for non-ASCII characters
  
  

Fixed Bugs

• [PS-1128] - Account wizard can create accounts outside of a group
• [PS-1185] - Asterisk Restart service does not always work immediately and takes up to 3 minutes
• [PS-1187] - Can't change locales setting if NTP server isn't configured yet
• [PS-1219] - The raw_session_log table is included in configuration-only backups
• [PS-1229] - File permissions allow reading MYSQL database credentials by local user
• [PS-1230] - Open file permissions on directory /data
• [PS-1239] - Clickjacking and Frame-Sniffing on some pages
• [PS-1240] - MIME sniffing on some pages
• [PS-1242] - Webserver uses an outdated version and discloses it
• [PS-1250] - It is possible to connect to PrivateServer using the same account on two devices with the same IP public address (eg: behind NAT on the same WiFi network) 
• [PS-1264] - Presence cache is not updated on Asterisk shutdown/restart
• [PS-1269] - Secondary net interface is not automatically activated after configuration
• [PS-1283] - [VOIPSEC] AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request
• [PS-1284] - [VOIPSEC] AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP
• [PS-1257] - Archive directory is readable by all local users
• [PS-1258] - Backup directory and files are readable by all local users