Module: kamailio
Branch: 5.5
Commit: c01b0d942b9e26e2ce0cf266abdee6eb63e8e55e
URL: https://github.com/kamailio/kamailio/commit/c01b0d942b9e26e2ce0cf266abdee6e…
Author: Kamailio Dev <kamailio.dev(a)kamailio.org>
Committer: Kamailio Dev <kamailio.dev(a)kamailio.org>
Date: 2021-09-06T10:46:31+02:00
modules: readme files regenerated - modules ... [skip ci]
---
Modified: src/modules/tls/README
---
Diff: https://github.com/kamailio/kamailio/commit/c01b0d942b9e26e2ce0cf266abdee6e…
Patch: https://github.com/kamailio/kamailio/commit/c01b0d942b9e26e2ce0cf266abdee6e…
---
diff --git a/src/modules/tls/README b/src/modules/tls/README
index 734dc7435d..86dde8f336 100644
--- a/src/modules/tls/README
+++ b/src/modules/tls/README
@@ -549,17 +549,17 @@ Revoking a certificate and using a CRL
require the certificate file and list of CA certificates per a regular
TLS configuration.
-AWS CloudHSM Example
+Thales Luna Example
--------------------
...
-# Example for AWS CloudHSM (SafeNet Luna)
+# Example for Thales Luna
modparam("tls", "engine", "gem")
-modparam("tls", "engine_config", "/usr/local/etc/kamailio/luna.conf")
-modparam("tls", "engine_algorithms", "ALL)
+modparam("tls", "engine_config", "/usr/local/etc/kamailio/thales.cnf")
+modparam("tls", "engine_algorithms", "EC")
...
-/usr/local/etc/kamailio/luna.cnf is a OpenSSL config format file used to
+/usr/local/etc/kamailio/thales.cnf is a OpenSSL config format file used to
bootstrap the engine, e.g., pass the PIN.
...
@@ -570,11 +570,12 @@ kamailio = openssl_init
engines = engine_section
[ engine_section ]
-# gem is the name of the SafeNet Luna OpenSSL engine
+# gem is the name of the Thales Luna OpenSSL engine
gem = gem_section
[ gem_section ]
-# from SafeNet documentation
+# from Thales documentation
+dynamic_path = /usr/lib64/engines-1.1/gem.so
ENGINE_INIT = 0:20:21:password=1234-ABCD-5678-EFGH
...
Module: kamailio
Branch: master
Commit: f1e87166d097bde903594aecfff2e562c1496e4f
URL: https://github.com/kamailio/kamailio/commit/f1e87166d097bde903594aecfff2e56…
Author: Kamailio Dev <kamailio.dev(a)kamailio.org>
Committer: Kamailio Dev <kamailio.dev(a)kamailio.org>
Date: 2021-09-06T10:46:15+02:00
modules: readme files regenerated - tls ... [skip ci]
---
Modified: src/modules/tls/README
---
Diff: https://github.com/kamailio/kamailio/commit/f1e87166d097bde903594aecfff2e56…
Patch: https://github.com/kamailio/kamailio/commit/f1e87166d097bde903594aecfff2e56…
---
diff --git a/src/modules/tls/README b/src/modules/tls/README
index 4b634e24e6..127cfa7601 100644
--- a/src/modules/tls/README
+++ b/src/modules/tls/README
@@ -545,17 +545,17 @@ Revoking a certificate and using a CRL
require the certificate file and list of CA certificates per a regular
TLS configuration.
-AWS CloudHSM Example
+Thales Luna Example
--------------------
...
-# Example for AWS CloudHSM (SafeNet Luna)
+# Example for Thales Luna
modparam("tls", "engine", "gem")
-modparam("tls", "engine_config", "/usr/local/etc/kamailio/luna.conf")
-modparam("tls", "engine_algorithms", "ALL)
+modparam("tls", "engine_config", "/usr/local/etc/kamailio/thales.cnf")
+modparam("tls", "engine_algorithms", "EC")
...
-/usr/local/etc/kamailio/luna.cnf is a OpenSSL config format file used to
+/usr/local/etc/kamailio/thales.cnf is a OpenSSL config format file used to
bootstrap the engine, e.g., pass the PIN.
...
@@ -566,11 +566,12 @@ kamailio = openssl_init
engines = engine_section
[ engine_section ]
-# gem is the name of the SafeNet Luna OpenSSL engine
+# gem is the name of the Thales Luna OpenSSL engine
gem = gem_section
[ gem_section ]
-# from SafeNet documentation
+# from Thales documentation
+dynamic_path = /usr/lib64/engines-1.1/gem.so
ENGINE_INIT = 0:20:21:password=1234-ABCD-5678-EFGH
...
Module: kamailio
Branch: 5.5
Commit: ad5af6d3acd648e6bd57b923083cc26d3a3d0f57
URL: https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26…
Author: Anthony Alba <ascanio.alba7(a)gmail.com>
Committer: Daniel-Constantin Mierla <miconda(a)gmail.com>
Date: 2021-09-06T10:35:01+02:00
tls: fix OpenSSL engine in child processes
tls_init.c calls OPENSSL_init_ssl(); this initializes the
global engine linked-list and this cannot be reset in the child.
To avoid linked-list corruption we manually instantiate
the engine object required for loading private keys instead of
relying on CONF_modules_load_file().
Updates to doc/.
Addresses #2839
(cherry picked from commit 238ef139bfbe145fb93e5c4b0730de58040d2265)
---
Modified: src/modules/tls/doc/hsm_howto.xml
Modified: src/modules/tls/tls_mod.c
---
Diff: https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26…
Patch: https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26…