Hello,
we just updated one kamailio server from 4.1.5 to 4.3.3, and although the
config file is correct and kamailio starts up, it doesn't initialize TLS
and says " tls support enabled, but no tls engine available (forgot to
load the tls module?)"
In the log I see:
Old shutdown (last lines):
Nov 13 11:44:38 lasola /usr/sbin/kamailio[15890]: DEBUG: <core>
[mem/shm_mem.c:235]: shm_mem_destroy(): destroying the shared memory lock
Nov 13 11:44:41 lasola /usr/sbin/kamailio[14818]: ERROR: <core>
[tcp_read.c:271]: tcp_read_data(): error reading: Connection reset by peer
(104)
Nov 13 11:44:41 lasola /usr/sbin/kamailio[14818]: ERROR: <core>
[tcp_read.c:1296]: tcp_read_req(): ERROR: tcp_read_req: error reading
New startup (first lines):
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: DEBUG: <core>
[daemonize.c:583]: set_core_dump(): core dump limits set to
18446744073709551615
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: WARNING: <core>
[main.c:2475]: main(): tls support enabled, but no tls engine available
(forgot to load the tls module?)
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: WARNING: <core>
[main.c:2476]: main(): disabling tls...
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: DEBUG: <core>
[async_task.c:88]: async_task_init(): start initializing asynk task
framework
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: DEBUG: <core>
[sr_module.c:959]: init_mod(): xmlrpc
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: DEBUG: <core>
[sr_module.c:689]: find_mod_export_record(): find_export_record: found
<bind_sl> in module sl [/usr/lib/x86_64-linux-gnu/kamailio/modules//sl.so]
Nov 13 11:44:42 lasola /usr/sbin/kamailio[16113]: DEBUG: <core>
[sr_module.c:959]: init_mod(): sl
In our config file we have the following lines for TLS (pretty late, after
all other module loading and after most parameters):
#!ifdef ENABLETLS
loadmodule "tls.so"
modparam("tls", "private_key",
"/etc/ssl/private/my.kamailio-key.pem")
modparam("tls", "certificate",
"/etc/ssl/certs/my.kamailio.crt")
#!ifdef TLS_CA_CHAIN
# Maybe we want to use a chain to the CA
modparam("tls", "ca_list",
"/etc/ssl/certs/my.ca-bundle.crt")
#!endif
enable_tls=1
listen=tls:1.2.3.4:5061
#!endif
After starting up, kamailio listens on port 5060, but not on port 5061. In
version 4.1.1, this config worked without a problem.
Has anybody seen this before? the tls module is there and available, it
doesn't say anything about "cannot load module", and it is only a warning
message. I'm also wondering, why this message is the first after starting
the server. From config I would expect that sl, tm and all the other
modules should be initialized before tls.
Best Regards,
Sebastian