Hello,
I am using letsencrypt cert and key and do not want to restart kamailio every 3 months to load new ones.
I know that there is: kamcmd tls.reload method but it has an error for me.
error: 500 - Error while fixing TLS configuration (consult server log)
I am checking the logs and see:
kamailio[3865480]: INFO: tls [tls_domain.c:345]: ksr_tls_fill_missing(): TLSs<default>: tls_method=3
kamailio[3865480]: INFO: tls [tls_domain.c:357]: ksr_tls_fill_missing(): TLSs<default>: certificate='/etc/kamailio/certs/my_cert.crt'
kamailio[3865480]: INFO: tls [tls_domain.c:364]: ksr_tls_fill_missing(): TLSs<default>: ca_list='(null)'
kamailio[3865480]: INFO: tls [tls_domain.c:371]: ksr_tls_fill_missing(): TLSs<default>: ca_path='(null)'
kamailio[3865480]: INFO: tls [tls_domain.c:378]: ksr_tls_fill_missing(): TLSs<default>: crl='(null)'
kamailio[3865480]: INFO: tls [tls_domain.c:382]: ksr_tls_fill_missing(): TLSs<default>: require_certificate=0
kamailio[3865480]: INFO: tls [tls_domain.c:390]: ksr_tls_fill_missing(): TLSs<default>: cipher_list='(null)'
kamailio[3865480]: INFO: tls [tls_domain.c:397]: ksr_tls_fill_missing(): TLSs<default>: private_key='/etc/kamailio/certs/private.key'
kamailio[3865480]: INFO: tls [tls_domain.c:401]: ksr_tls_fill_missing(): TLSs<default>: verify_certificate=0
kamailio[3865480]: INFO: tls [tls_domain.c:406]: ksr_tls_fill_missing(): TLSs<default>: verify_depth=9
kamailio[3865480]: INFO: tls [tls_domain.c:410]: ksr_tls_fill_missing(): TLSs<default>: verify_client=0
kamailio[3865480]: NOTICE: tls [tls_domain.c:1168]: ksr_tls_fix_domain(): registered server_name callback handler for socket [:0], server_name='<default>' ...
kamailio[3865480]: ERROR: tls [tls_domain.c:590]: load_cert(): TLSs<default>: Unable to load certificate file '/etc/kamailio/certs/my_cert.crt'
kamailio[3865480]: ERROR: tls [tls_util.h:49]: tls_err_ret(): load_cert:error:03000072:digital envelope routines::decode error (sni: unknown)
kamailio[3865480]: ERROR: tls [tls_util.h:49]: tls_err_ret(): load_cert:error:0A00018F:SSL routines::ee key too small (sni: unknown)
Any advice ?
It's interesting that there are not any TLS errors in case I restart kamailio. I can make TLS calls without problems.
deb 12.5
version: kamailio 5.7.4 (x86_64/linux)
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4033
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/4033(a)github.com>
Module: kamailio
Branch: master
Commit: 7215f2554e3c2551870902fd061f20d5a4160bca
URL: https://github.com/kamailio/kamailio/commit/7215f2554e3c2551870902fd061f20d…
Author: Kamailio Dev <kamailio.dev(a)kamailio.org>
Committer: Kamailio Dev <kamailio.dev(a)kamailio.org>
Date: 2024-11-20T18:31:10+01:00
modules: readme files regenerated - sqlops ... [skip ci]
---
Modified: src/modules/sqlops/README
---
Diff: https://github.com/kamailio/kamailio/commit/7215f2554e3c2551870902fd061f20d…
Patch: https://github.com/kamailio/kamailio/commit/7215f2554e3c2551870902fd061f20d…
---
diff --git a/src/modules/sqlops/README b/src/modules/sqlops/README
index e8b7b072fc6..d55fab0e081 100644
--- a/src/modules/sqlops/README
+++ b/src/modules/sqlops/README
@@ -209,9 +209,10 @@ modparam("sqlops", "log_buf_size", 4096)
3.5. connect_mode (int)
- Control if the module must stop loading when connecting to database
- server fails during start up. Values: 0 - stop loading; 1 - continue
- even if connecting to database server fails.
+ Control how the module will connect to database. Values: 0 - connect at
+ start up or fail 1 - connect at start up but continue even if
+ connecting to database server fails 2 - do not connect until needed
+ (this will limit the amount of idle connections)
Default value is 0.
<!-- Kamailio Pull Request Template -->
<!--
IMPORTANT:
- for detailed contributing guidelines, read:
https://github.com/kamailio/kamailio/blob/master/.github/CONTRIBUTING.md
- pull requests must be done to master branch, unless they are backports
of fixes from master branch to a stable branch
- backports to stable branches must be done with 'git cherry-pick -x ...'
- code is contributed under BSD for core and main components (tm, sl, auth, tls)
- code is contributed GPLv2 or a compatible license for the other components
- GPL code is contributed with OpenSSL licensing exception
-->
#### Pre-Submission Checklist
<!-- Go over all points below, and after creating the PR, tick all the checkboxes that apply -->
<!-- All points should be verified, otherwise, read the CONTRIBUTING guidelines from above-->
<!-- If you're unsure about any of these, don't hesitate to ask on sr-dev mailing list -->
- [x] Commit message has the format required by CONTRIBUTING guide
- [x] Commits are split per component (core, individual modules, libs, utils, ...)
- [x] Each component has a single commit (if not, squash them into one commit)
- [x] No commits to README files for modules (changes must be done to docbook files
in `doc/` subfolder, the README file is autogenerated)
#### Type Of Change
- [x] New feature (non-breaking change which adds new functionality)
#### Checklist:
<!-- Go over all points below, and after creating the PR, tick the checkboxes that apply -->
- [x] Tested changes locally
#### Description
<!-- Describe your changes in detail -->
Very often I only need one connection from a worker process, to cache fill provisioning data to Kamailio.
This new sqlops connect mode will reduce the amount of idle connection to the database server significantly.
You can view, comment on, or merge this pull request online at:
https://github.com/kamailio/kamailio/pull/4027
-- Commit Summary --
* sqlops: new connect mode to limit the amount of connections
-- File Changes --
M src/modules/sqlops/doc/sqlops_admin.xml (8)
M src/modules/sqlops/sql_api.c (5)
M src/modules/sqlops/sqlops.c (17)
-- Patch Links --
https://github.com/kamailio/kamailio/pull/4027.patchhttps://github.com/kamailio/kamailio/pull/4027.diff
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/4027
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/pull/4027(a)github.com>