Module: kamailio
Branch: master
Commit: 4d450116309d1a2e2b6aceb6fa16657a1e9f44fb
URL: https://github.com/kamailio/kamailio/commit/4d450116309d1a2e2b6aceb6fa16657…
Author: Kamailio Dev <kamailio.dev(a)kamailio.org>
Committer: Kamailio Dev <kamailio.dev(a)kamailio.org>
Date: 2020-05-12T09:16:20+02:00
modules: readme files regenerated - tls ... [skip ci]
---
Modified: src/modules/tls/README
---
Diff: https://github.com/kamailio/kamailio/commit/4d450116309d1a2e2b6aceb6fa16657…
Patch: https://github.com/kamailio/kamailio/commit/4d450116309d1a2e2b6aceb6fa16657…
---
diff --git a/src/modules/tls/README b/src/modules/tls/README
index 04503393a2..81eb47590b 100644
--- a/src/modules/tls/README
+++ b/src/modules/tls/README
@@ -638,7 +638,7 @@ Place holder
use SSLv3 for anything which should be secure.
* SSLv2 - only SSLv2 connections, for old clients. Note: you
shouldn't use SSLv2 for anything which should be secure. Newer
- versions of libssl don't include support for it anymore.
+ versions of OpenSSL libraries don't include support for it anymore.
* SSLv23 - any of the SSLv2, SSLv3 and TLSv1 or newer methods will be
accepted.
From the OpenSSL manual: "A TLS/SSL connection established with
@@ -649,9 +649,9 @@ Place holder
TLSv1.2 and permits a fallback to SSLv3. A server will support
SSLv3, TLSv1, TLSv1.1 and TLSv1.2 protocols. This is the best
choice when compatibility is a concern."
- Note: For older libssl version, this option allows SSLv2, with
- hello messages done over SSLv2. You shouldn't use SSLv2 or SSLv3
- for anything which should be secure.
+ Note: For older OpenSSL library versions, this option allows SSLv2,
+ with hello messages done over SSLv2. You shouldn't use SSLv2 or
+ SSLv3 for anything which should be secure.
If RFC 3261 conformance is desired, at least TLSv1 must be used. For
compatibility with older clients SSLv23 is the option, but again, be
@@ -1220,7 +1220,7 @@ modparam("tls", "session_cache", 1)
The value for session ID context, making sense when session caching is
enabled.
- By default TLS session_id is "sip-router-tls-3.1".
+ By default TLS session_id is "kamailio-tls-5.x.y".
Example 1.38. Set session_id parameter
...
@@ -1477,7 +1477,7 @@ modparam("tls", "private_key", "/engine:my_HSM_key_label")
modparam("tls", "engine", "pkcs11")
modparam("tls", "private_key", "/engine:pkcs11:token=MYTOKEN;object=MYKEYLABEL")
-modparam("tls", "engine_conf", "/usr/local/etc/kamailio/openssl.cnf")
+modparam("tls", "engine_config", "/usr/local/etc/kamailio/openssl.cnf")
modparam("tls", "engine_algorithms", "ALL")
...
Module: kamailio
Branch: master
Commit: ff887fe5d0d7cec7fc0640a54c80b322d421ed36
URL: https://github.com/kamailio/kamailio/commit/ff887fe5d0d7cec7fc0640a54c80b32…
Author: Olle E. Johansson <oej(a)edvina.net>
Committer: Olle E. Johansson <oej(a)edvina.net>
Date: 2020-05-12T09:08:33+02:00
TLS: Try to always refer to OpenSSL as "OpenSSL" instead of other names
---
Modified: src/modules/tls/doc/params.xml
---
Diff: https://github.com/kamailio/kamailio/commit/ff887fe5d0d7cec7fc0640a54c80b32…
Patch: https://github.com/kamailio/kamailio/commit/ff887fe5d0d7cec7fc0640a54c80b32…
---
diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 8cc7f2f7b9..f23aa921f0 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -65,7 +65,7 @@
<para>
<emphasis>SSLv2</emphasis> - only SSLv2 connections, for old clients.
Note: you shouldn't use SSLv2 for anything which should be secure.
- Newer versions of libssl don't include support for it anymore.
+ Newer versions of OpenSSL libraries don't include support for it anymore.
</para>
</listitem>
<listitem>
@@ -84,7 +84,7 @@
is a concern."
</para>
<para>
- Note: For older libssl version, this option allows SSLv2, with hello
+ Note: For older OpenSSL library versions, this option allows SSLv2, with hello
messages done over SSLv2. You shouldn't use SSLv2 or SSLv3 for anything
which should be secure.
</para>
Module: kamailio
Branch: master
Commit: 70bcb5f88dc87e27940cc71e293d1c68a7717af6
URL: https://github.com/kamailio/kamailio/commit/70bcb5f88dc87e27940cc71e293d1c6…
Author: Olle E. Johansson <oej(a)edvina.net>
Committer: Olle E. Johansson <oej(a)edvina.net>
Date: 2020-05-12T09:07:02+02:00
TLS: Fix TLS session id example to match source code
---
Modified: src/modules/tls/doc/params.xml
---
Diff: https://github.com/kamailio/kamailio/commit/70bcb5f88dc87e27940cc71e293d1c6…
Patch: https://github.com/kamailio/kamailio/commit/70bcb5f88dc87e27940cc71e293d1c6…
---
diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 9c89ae8be9..8cc7f2f7b9 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -982,7 +982,7 @@ modparam("tls", "session_cache", 1)
The value for session ID context, making sense when session caching is enabled.
</para>
<para>
- By default TLS session_id is "sip-router-tls-3.1".
+ By default TLS session_id is "kamailio-tls-5.x.y".
</para>
<example>
<title>Set <varname>session_id</varname> parameter</title>
Hi, I am implementing a sip proxy with kamailio and multiple asterisk servers, when kamailio send the OPTIONS asterisk don´t reply, and i see with sngrep tool that in the asterisk servers the SIP message OPTIONS arrives, but has no reply from asterisk, and enabling the sip debug nothing occurs, but the OPTIONS message between asterisk servers is all ok.
On kamailio logs get:
dispatcher [dispatch.c:3159]: ds_options_callback(): OPTIONS-Request was finished with code 408 (to sip:172.20.20.4, group 1)
The SIP traffic arrives the asterisk servers, but asterisk don´t reply the message, (I know this because i can see it with the sngrep tool, because the sip debug on asterisk doesn't show it) . However when the message is from another asterisk all is ok.
Sip kamailio OPTIONS message on asterisk
```
OPTIONS sip:172.20.20.3 SIP/2.0
Via: SIP/2.0/UDP 172.16.10.195;branch=z9hG4bKef0b.b1358
To: <sip:172.20.20.3>
From: <sip:kamailio@172.20.20.6>;tag=3393f0703fb0ccaca7
09ff37de39f5-b7044ca5
CSeq: 10 OPTIONS
Call-ID: 791b966c5d00cd60-24281(a)127.0.0.1
Max-Forwards: 70
Content-Length: 0
User-Agent: kamailio (5.3.4 (x86_64/linux))
```
### Additional Information
```
version: kamailio 5.3.4 (x86_64/linux) 117ff9
flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED
ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 117ff9
compiled on 13:37:37 May 6 2020 with gcc 8.2.1
```
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2320