Hello,
On 3/19/12 7:57 AM, Juha Heinanen wrote:
in tls.cfg, i made ca_list to point to ca-certificates.crt file that comes with debian. when i then started sip router, i got errors
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:447]: TLSc<default>: Unable to load CA list '/etc/ssl/certs/ca-certificates.crt' Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:0906D041:PEM routines:PEM_read_bio:malloc failure Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core> [sr_module.c:889]: init_mod_child(): Error while initializing module tls (/usr/lib/sip-proxy/modules/tls.so) Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core> [main.c:1554]: ERROR: main: error in init_child(PROC_INT) -- exiting
is that because there are too many (= 139) entries in ca-certificates.crt? if so, how to solve the problem? would it be a good idea that sip router would be default be able to handle this correctly?
is this with default mem size?
TLS requires lot more memory that usual UDP to deal with a fair enough amount of active connections. In debian, there is /etc/default/kamailio that is used to set -m and -M parameters for using with /etc/init.d/kamailio.
Cheers, Daniel