On 08/19/2013 03:34 PM, Roberto Fichera wrote:
On 08/19/2013 12:37 PM, Daniel-Constantin Mierla wrote:
Hi Daniel,
Does it work with tls.so as first loaded module?
If not, can you send the logs messages with debug=3?
Cheers, Daniel
On 8/19/13 12:26 PM, Roberto Fichera wrote:
On 08/19/2013 12:14 PM, Daniel-Constantin Mierla wrote:
Hello,
Hi,
what version of libssl is installed?
[root@proxy CA]# rpm -q -a openssl-libs openssl-libs-1.0.1e-4.fc18.x86_64 [root@proxy CA]#
Mmmhhh!!! Looks like this particular version has problem, see:
I can confirm that the bug is present in both Fedora 18 & 19. The openssl has a bug which prevent the tls module to work due to allow_customize = 0 set in one of the functions called by OPENSSL_init() within CRYPTO_set_mem_functions().
You can check easily with this small code:
#include <stdio.h> #include <openssl/ssl.h>
static void *myMalloc( size_t s ) { return NULL; } static void *myRealloc( void *p, size_t s ) { return NULL; } static void myFree( void *p ) {}
int main() { if ( !CRYPTO_set_mem_functions( myMalloc, myRealloc, myFree) ) { fprintf( stderr, "Unable to set the memory allocation functions\n"); return -1; }
return 0; }
compile with "gcc -o testssl testssl.c -lssl -lcrypto"
I've done a small patch in order to workaround the problem in case someone need it.
can you list what modules are loaded in your kamailio.cfg? Try with tls.so loaded as first module...
Sure!
#!define WITH_PGSQL #!define WITH_AUTH #!define WITH_NAT #!define WITH_TLS #!define WITH_ANTIFLOOD #!define WITH_ACCDB #!define WITH_DIALPLAN
.....
# set paths to location of modules (to sources or installation folders) #!ifdef WITH_SRCPATH mpath="modules_k:modules" #!else mpath="/usr/local/lib/kamailio/modules_k/:/usr/lib64/kamailio/modules/" #!endif
#!ifdef WITH_TLS loadmodule "tls.so" #!endif
#!ifdef WITH_MYSQL loadmodule "db_mysql.so" #!endif
#!ifdef WITH_PGSQL loadmodule "db_postgres.so" #!endif
loadmodule "mi_fifo.so" loadmodule "kex.so" loadmodule "corex.so" loadmodule "tm.so" loadmodule "tmx.so" loadmodule "sl.so" loadmodule "rr.so" loadmodule "pv.so" loadmodule "maxfwd.so" loadmodule "usrloc.so" loadmodule "registrar.so" loadmodule "textops.so" loadmodule "siputils.so" loadmodule "xlog.so" loadmodule "sanity.so" loadmodule "ctl.so" loadmodule "cfg_rpc.so" loadmodule "mi_rpc.so" loadmodule "acc.so" loadmodule "avpops.so"
#!ifdef WITH_AUTH loadmodule "auth.so" loadmodule "auth_db.so" #!ifdef WITH_IPAUTH loadmodule "permissions.so" #!endif #!endif
#!ifdef WITH_ALIASDB loadmodule "alias_db.so" #!endif
#!ifdef WITH_SPEEDDIAL loadmodule "speeddial.so" #!endif
#!ifdef WITH_DIALPLAN loadmodule "dialplan.so" #!endif
#!ifdef WITH_MULTIDOMAIN loadmodule "domain.so" #!endif
#!ifdef WITH_PRESENCE loadmodule "presence.so" loadmodule "presence_xml.so" #!endif
#!ifdef WITH_NAT loadmodule "nathelper.so" loadmodule "rtpproxy.so" #!endif
#!ifdef WITH_ANTIFLOOD loadmodule "htable.so" loadmodule "pike.so" #!endif
#!ifdef WITH_XMLRPC loadmodule "xmlrpc.so" #!endif
#!ifdef WITH_DEBUG loadmodule "debugger.so" #!endif
Cheers, Roberto Fichera.
Cheers, Daniel
On 8/19/13 11:47 AM, Roberto Fichera wrote:
Hi All,
I'm just trying to setup the TLS on the last Kamailio v4.0.3 on Fedora 18 64bits. Kamailio doesn't start and terminate with the error below:
loading modules under /usr/local/lib/kamailio/modules_k/:/usr/lib64/kamailio/modules/ 0(1676) ERROR: tls [tls_init.c:471]: tls_pre_init(): Unable to set the memory allocation functions 0(1676) ERROR: <core> [sr_module.c:600]: load_module(): ERROR: load_module: /usr/lib64/kamailio/modules/tls.so: mod_register failed 0(1676) : <core> [cfg.y:3567]: yyerror_at(): parse error in config file //etc/kamailio/kamailio.cfg, line 279, column 12-19: failed to load module 0(1676) ERROR: <core> [modparam.c:163]: set_mod_param_regex(): set_mod_param_regex: No module matching <tls> found 0(1676) : <core> [cfg.y:3570]: yyerror_at(): parse error in config file //etc/kamailio/kamailio.cfg, line 439, column 51: Can't set module parameter 0(1676) ERROR: <core> [modparam.c:163]: set_mod_param_regex(): set_mod_param_regex: No module matching <tls> found 0(1676) : <core> [cfg.y:3570]: yyerror_at(): parse error in config file //etc/kamailio/kamailio.cfg, line 440, column 97: Can't set module parameter 0(1676) ERROR: <core> [modparam.c:163]: set_mod_param_regex(): set_mod_param_regex: No module matching <tls> found 0(1676) : <core> [cfg.y:3570]: yyerror_at(): parse error in config file //etc/kamailio/kamailio.cfg, line 441, column 92: Can't set module parameter 0(1676) ERROR: <core> [modparam.c:163]: set_mod_param_regex(): set_mod_param_regex: No module matching <tls> found 0(1676) : <core> [cfg.y:3570]: yyerror_at(): parse error in config file //etc/kamailio/kamailio.cfg, line 442, column 64: Can't set module parameter ERROR: bad config file (5 errors)
Cheers, Roberto Fichera.
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla - http://www.asipto.com http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users