sr-dev June 2022

sr-dev@lists.kamailio.org

20 participants
282 discussions

[kamailio/kamailio] Errormessage TLS read:error:0D0E10DF:asn1 encoding routines:asn1_get_uint64:too large (Issue #3168)
by MartinPalmAGDS 04 Jul '22

04 Jul '22

We use Kamilio as a proxy server to connect softphones to our PBX systems. We have run into some TLS problems. These problems result in a shut down of the TLS connection after the error is encountered. We have looked into serial numbers of certificates. The current code in kamailio seems to be broken due to changes in the world around... many certificates today do not adhere to the previously assumed behaviour of certificate serial numbers anymore. The error which causes the connection to drop seems to be related to a comparison of the certificate serial numbers during renegotiation. tls_err_ret(): TLS read:error:0D0E10DF:asn1 encoding routines:asn1_get_uint64:too large Kamailio expects serial numbers to fit in a 64 bit unsigned, however during the last years, starting around 2003 more and more systems use automatically generated serial numbers, which are frequently 128 bit long. The serialnumber of our own Auerswald root certificate looks to be only 64 bit long, but during the negotiation is presented as 9 bytes starting with 00h, which is interpreted as a 72bit value. Trying to put this serial number in a 64 bit long kills the connection. Due to the different ways that are used to generate serial numbers now, there is no simple algorithm to condense the number into a 64bit value, and the whole number should be compared to see if it is same or higher. We currently have disabled renegotiation to avoid the connection being dropped during renegotiation. Which however can lead to the connection being dropped by the other side during renegotiation, but this is not a good permanent workaround! #### Reproduction This issue happens infrequently ### Possible Solutions No workaround possible on our side ### Additional Information Kamailio Version 5.5.4 LibSSL 1.1.1.n * **Operating System**: Linux, Debian oldstable -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3168 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3168(a)github.com>

3 3

[kamailio/kamailio] tls: cert serial number can exceed uint64 (PR #3171)
by space88man 04 Jul '22

04 Jul '22

#### Pre-Submission Checklist    - [X] Commit message has the format required by CONTRIBUTING guide - [X] Commits are split per component (core, individual modules, libs, utils, ...) - [X] Each component has a single commit (if not, squash them into one commit) - [X] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [ ] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [X] Breaking change (fix or feature that would change existing functionality) #### Checklist: - [X] PR should be backported to stable branches - [X] Tested changes locally - [X] Related to issue #3168 #### Description Certificate serial numbers can be large integers (> 2^64). Parse then as BIGNUM and store the string in pv; we cannot store as integer anymore. The original code handles 2^64 with a static buffer of 19. We upsize to 2^256 with a static buffer of 80. May break configurations that try to extract the sn pv as an integer (does anyone actually do this?) Addresses #3168. You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3171 -- Commit Summary -- * tls: cert serial number can exceed uint64 -- File Changes -- M src/modules/tls/tls_select.c (24) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3171.patch https://github.com/kamailio/kamailio/pull/3171.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3171 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3171(a)github.com>

2 10

[kamailio/kamailio] presence: be more resilient doing clean up of presentity values (PR #3169)
by Victor Seva 04 Jul '22

04 Jul '22

#### Pre-Submission Checklist    - [x] Commit message has the format required by CONTRIBUTING guide - [x] Commits are split per component (core, individual modules, libs, utils, ...) - [x] Each component has a single commit (if not, squash them into one commit) - [x] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [x] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [x] PR should be backported to stable branches - [x] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description previously if an error was found we were bailing out and the value was kept so at next round the value will be there and no more values where removed You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3169 -- Commit Summary -- * presence: be more resilient doing clean up of presentity values -- File Changes -- M src/modules/presence/publish.c (47) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3169.patch https://github.com/kamailio/kamailio/pull/3169.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3169 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3169(a)github.com>

2 4

[kamailio/kamailio] kamdbctl.dbtext and kamctl.dbtext use different variables (Issue #3170)
by UncleRa 01 Jul '22

01 Jul '22

### Description Unexpected behavior when using db_text.so #### Debugging Data ``` root@kamailio:/usr/lib/x86_64-linux-gnu/kamailio/kamctl# grep -r DB_PATH * kamdbctl.dbtext:if [ -z "$DB_PATH" ] ; then kamdbctl.dbtext: DB_PATH="/usr/local/etc/kamailio/dbtext" kamdbctl.dbtext:DB_PATH=$1 kamdbctl.dbtext:minfo "DBTEXT ... erasing all files at: $DB_PATH" kamdbctl.dbtext:rm -rf $DB_PATH kamdbctl.dbtext: merr "kamailio_create function takes one param (DB_PATH)" kamdbctl.dbtext:DB_PATH=$1 kamdbctl.dbtext:minfo "creating DBTEXT tables at: $DB_PATH ..." kamdbctl.dbtext:mkdir -p $DB_PATH kamdbctl.dbtext: cp $DB_SCHEMA/$TABLE $DB_PATH/$TABLE kamdbctl.dbtext: merr "presence_create function takes one param (DB_PATH)" kamdbctl.dbtext:DB_PATH=$1 kamdbctl.dbtext:minfo "creating DBTEXT presence tables at: $DB_PATH ..." kamdbctl.dbtext:mkdir -p $DB_PATH kamdbctl.dbtext: cp $DB_SCHEMA/$TABLE $DB_PATH/$TABLE kamdbctl.dbtext:minfo "creating DBTEXT extra tables at: $DB_PATH ..." kamdbctl.dbtext: cp $DB_SCHEMA/$TABLE $DB_PATH/$TABLE ``` ``` root@kamailioz99s1:/usr/lib/x86_64-linux-gnu/kamailio/kamctl# grep -r DBTEXT_PATH * dbtextdb/dbtextdb.py: if 'DBTEXT_PATH' not in os.environ or not os.environ['DBTEXT_PATH']: dbtextdb/dbtextdb.py: print('DBTEXT_PATH must be set') dbtextdb/dbtextdb.py: location = os.environ['DBTEXT_PATH'] kamctl.dbtext: DBTEXT_PATH="$MYLIBDIR/dbtext/kamailio/" kamctl.dbtext:if [ -z "$DBTEXT_PATH" ] ; then kamctl.dbtext: DBTEXT_PATH="/usr/share/kamailio/dbtext/kamailio" kamctl.dbtext:export DBTEXT_PATH ``` ### Possible Solutions The simplest way to fix it is to add the lines to the file `kamctlrc` ``` root@kamailioz99s1:~/backup/orig# diff kamctlrc kamctlrc.orig 32,34d31 < # database path used by kamctl.dbtext and dbtextdb.py < # DBTEXT_PATH="/usr/local/etc/kamailio/dbtext" < ``` ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.3.9 (x86_64/linux) flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: unknown compiled with gcc 7.5.0 ``` * **Operating System**: ``` DISTRIB_ID=Ubuntu DISTRIB_RELEASE=18.04 DISTRIB_CODENAME=bionic DISTRIB_DESCRIPTION="Ubuntu 18.04.6 LTS" ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3170 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3170(a)github.com>

2 4

[kamailio/kamailio] topos breaking update messages (Issue #3090)
by Simone de Blasiis 30 Jun '22

30 Jun '22

### Description This issue has already been reported in the past both on GitHub ( Issue #2659 ) and on the [mailing list](https://lists.kamailio.org/pipermail/sr-users/2022-April/114620.html). We are experiencing some issues with UPDATE messages being sent by the PSTN after an early media announcement. To reproduce the issue we can call a specific number that has an early media announcement, since it's a paid phone number it has to announce how much it would cost before picking up the call. In this initial part the call is being negotiated in g711a. As soon as the announcement ends, the PSTN sends an UPDATE message containing the new desired codec (g729) for the actual call. Kamailio doesn't route the UPDATE message to the destination and it instead replies with a 404 message. If topos is disabled the update message gets routed correctly. #### SIP Traffic I've attached a pcap with anonymized IPs to make it harder for bots. Here is a legend for the IPs: - 12.34.123.123 is Kamailio - 62.23.19.74 is the PSTN - 1.2.130.40 is the client making the call [errorupdate_anon.zip](https://github.com/kamailio/kamailio/files/8522365/er… ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` version: kamailio 5.5.4 (x86_64/linux) flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: unknown compiled with gcc 10.2.1 ``` * **Operating System**: ``` Linux 5.10.0-13-amd64 #1 SMP Debian 5.10.106-1 (2022-03-17) x86_64 GNU/Linux ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3090 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3090(a)github.com>

4 12

git:master:1f6ec902: kamctl: propagate DB_PATH to DBTEXT_PATH
by Daniel-Constantin Mierla 30 Jun '22

30 Jun '22

Module: kamailio Branch: master Commit: 1f6ec9022f2358441233e8b139e13cbdcf0947aa URL: https://github.com/kamailio/kamailio/commit/1f6ec9022f2358441233e8b139e13cb… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2022-06-30T19:34:28+02:00 kamctl: propagate DB_PATH to DBTEXT_PATH - GH #3170 --- Modified: utils/kamctl/kamctl.dbtext --- Diff: https://github.com/kamailio/kamailio/commit/1f6ec9022f2358441233e8b139e13cb… Patch: https://github.com/kamailio/kamailio/commit/1f6ec9022f2358441233e8b139e13cb… --- diff --git a/utils/kamctl/kamctl.dbtext b/utils/kamctl/kamctl.dbtext index 2198d30db2..0e5f9c424a 100644 --- a/utils/kamctl/kamctl.dbtext +++ b/utils/kamctl/kamctl.dbtext @@ -19,7 +19,11 @@ fi; # path to the dbtext database if [ -z "$DBTEXT_PATH" ] ; then - DBTEXT_PATH="/usr/local/share/kamailio/dbtext/kamailio" + if [ -z "$DB_PATH" ] ; then + DBTEXT_PATH="/usr/local/share/kamailio/dbtext/kamailio" + else + DBTEXT_PATH=$DB_PATH + fi fi export DBTEXT_PATH

1 0

git:master:ecbe9052: pkg/kamailio/deb: add initial support for jammy
by Victor Seva 30 Jun '22

30 Jun '22

Module: kamailio Branch: master Commit: ecbe90524165cf2fd8081ec5fe81d674f7a3334a URL: https://github.com/kamailio/kamailio/commit/ecbe90524165cf2fd8081ec5fe81d67… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2022-06-30T07:46:48+02:00 pkg/kamailio/deb: add initial support for jammy --- Added: pkg/kamailio/deb/debian/backports/jammy Added: pkg/kamailio/deb/jammy/changelog Added: pkg/kamailio/deb/jammy/compat Added: pkg/kamailio/deb/jammy/control Added: pkg/kamailio/deb/jammy/copyright Added: pkg/kamailio/deb/jammy/kamailio-autheph-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-berkeley-bin.dirs Added: pkg/kamailio/deb/jammy/kamailio-dnssec-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-outbound-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-secsipid-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-systemd-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-tls-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio-websocket-modules.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio.README.Debian Added: pkg/kamailio/deb/jammy/kamailio.default Added: pkg/kamailio/deb/jammy/kamailio.examples Added: pkg/kamailio/deb/jammy/kamailio.init Added: pkg/kamailio/deb/jammy/kamailio.lintian-overrides Added: pkg/kamailio/deb/jammy/kamailio.postinst Added: pkg/kamailio/deb/jammy/kamailio.service Added: pkg/kamailio/deb/jammy/rules Added: pkg/kamailio/deb/jammy/source.lintian-overrides Added: pkg/kamailio/deb/jammy/source/format Added: pkg/kamailio/deb/jammy/watch --- Diff: https://github.com/kamailio/kamailio/commit/ecbe90524165cf2fd8081ec5fe81d67… Patch: https://github.com/kamailio/kamailio/commit/ecbe90524165cf2fd8081ec5fe81d67…

1 0

[kamailio/kamailio] IP tos value not updated when forwarding the request (Issue #3167)
by patrickarton 29 Jun '22

29 Jun '22

### Description i am setting **tos** core parameter to set TOS for sent IP messages but when they leave kamailio i dont the see IP TOS updated via wireshark. (caller) 192.168.214.125:3030 <-----> (kamailio) 192.168.214.125:7070 <-----> (kamailio) 192.168.214.205:8080  ### Troubleshooting #### Reproduction ``` children=3 listen=udp:192.168.214.125:7070 debug=0 tos=184 ```  #### Debugging Data  ``` (paste your debugging data here) ``` #### Log Messages  ``` (paste your log messages here) ``` #### SIP Traffic  ``` (paste your sip traffic here) ``` ![kamailio-tos](https://user-images.githubusercontent.com/91390150/176262063-0a9a9ced-7fd1-405f-b249-7ebf0e601548.jpg) ### Possible Solutions  ### Additional Information * **Kamailio Version** - output of `kamailio -v` ``` 5.5.4 ``` * **Operating System**:  ``` (paste your output here) ``` -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/3167 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/issues/3167(a)github.com>

1 1

How to enable SSL in kamailio mysql db connectivity
by Jeetha P J 29 Jun '22

29 Jun '22

Hi Team, We have SSL in mySQL DB.So I need to add configuration in kamailio also.I am adding the configuration I tried. Please help me to achieve this.Its little urgent. My /etc/mysql/my.cnf [client] socket = /run/mysqld/mysqld.sock ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem #require_secure_transport = ON [kamailio] socket = /run/mysqld//mysqld.sock #require_secure_transport = ON user = kamailio password = kamailiorw host=xxx.xxx.xxx.xxx default-character-set = utf8 ssl_key=/var/lib/mysql/Quant-certs/client-key.pem ssl_cert=/var/lib/mysql/Quant-certs/client_ca_cert.pem ssl_ca=/var/lib/mysql/Quant-certs/server-ca.pem ssl_verify=1 /etc/kamailio/kamailio.cfg #!ifndef DBURL #!define DBURL "mysql://kamailio:kamailiorw@xx.xx.xxx.xxx/kamailio" #!endif gateqeeper-kam-dev kamailio[7879]: 0(7879) DEBUG: db_mysql [km_my_con.c:107]: db_mysql_new_connection(): opening connection: mysql://xxxx:xxxx@xx.xxx.xx.xxx/kamailio Jun 27 06:53:12 gateqeeper-kam-dev kamailio[7879]: 0(7879) ERROR: db_mysql [km_my_con.c:139]: db_mysql_new_connection(): driver error: Access denied for user 'kamailio'@'xx.xxx.xx.xx' (using password: YES) Please help me to get it solved. Thanks & Regards Jeetha P J -- _This message contains information that may be privileged or confidential and is the property of the Quantiphi Inc and/or its affiliates_. It is intended only for the person to whom it is addressed. _If you are not the intended recipient, any review, dissemination, distribution, copying, storage or other use of all or any portion of this message is strictly prohibited. If you received this message in error, please immediately notify the sender by reply e-mail and delete this message in its *entirety*___

2 4

Jenkins build became unstable: kamailiodev-nightly-binaries » i386,bookworm #2221
by kamailio＠sipwise.com 29 Jun '22

29 Jun '22

See <https://kamailio.sipwise.com/job/kamailiodev-nightly-binaries/architecture=…>

1 1

← Newer
1
...
9
10
11
12
13
14
15
...
29
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev June 2022