Re: [SR-Users] Recommended openSSL version

Hello, to add to this topic: tls module runs smooth when no other module uses an external library that is linked also with tls, I didn't have issue with in the past few years. But if another module that indirectly links also the libssl, I also got random crashes, usually during events when kamailio code is not involved at all. For example, a while ago using the http_client module (which uses libcurl that linked also libssl) resulted in sporadic crashes during tls handshake -- that's all in libssl, nothing to do with sip traffic at that stage. And actually there were also crashes when opening the connection to the https server. The behaviour was non-deterministic, months without any issue, then 1-2 crashes in a week or so, then all good as well. I somehow related it to minor updates of the operating system. After all, I ended up writing ruxc module to have an alternative http_client() function and from that moment no libssl related crash on the respective system. Strange that on another customer having same OS and using http_client() function, all was and still is fine. So it could be also related to tls settings in both sides of the connection (e.g., ciphers, renegotiation, tls version, ...). If you migrate to kamailio 5.6.x, then you can also try using tlsa module instead of tls, that should isolate the global libssl contexts, one inside the tlsa and one in those modules linking dynamically libssl. Cheers, Daniel On 23.06.22 16:46, Karsten Horsmann wrote: Hi Igor, I jumped from 5.3 to 5.5.x so I read carefull the changelog and migrate steps. https://www.kamailio.org/wiki/features/new-in-5.5.x Show a bit about tls. Igor Olhovskiy <igorolhovskiy(a)gmail.com> schrieb am Mi., 22. Juni 2022, 21:08: __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users(a)lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training - Online: June 20-23, 2022 * https://www.asipto.com/sw/kamailio-advanced-training-online/ __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions * sr-users(a)lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users