17 May
2024
17 May
'24
1:52 p.m.
Hello,
In the releases after 5.7.2 there have been a lot of TLS related changes. There were
necessary due to several critical memory corruption bugs due to implementation decisions
from the OpenSSL team in version 3.x. These changes were somewhat larger as usually
expected in minor releases, but ultimately necessary due to the mentioned problems. Due to
the complexity of the problems, several iterations were necessary to solve it completely.
So, without looking too much into the details of your issue - I suspect that the problems
you are observing might be caused from these changes. It might that you did a security
package update that changes some memory layout, for example, that triggered it.
I think that these TLS changes are now done in the releases 5.7.5 and 5.8.1, and these
releases should be stable again. This has been confirmed on multiples reports on our issue
tracker and also in some of our customer environments.
So, I would suggest you give the 5.7.5 a try. If there are still crashes on startup,
please let provide an update on the list or on the issue tracker.
Cheers,
Henning
--
Henning Westerholt - https://skalatan.de/blog/
Kamailio services - https://gilawa.com
-----Original Message-----
From: stefanr--- via sr-users <sr-users(a)lists.kamailio.org>
Sent: Freitag, 17. Mai 2024 19:00
To: sr-users(a)lists.kamailio.org
Cc: stefanr(a)wave.com
Subject: [SR-Users] Re: Segfault on startup when using TLS in kamailio 5.7.4
For additional context:
- Our Kamailio setup receives SIP messages from one endpoint over UDP and
forwards them to another endpoint over TLS, with rtpengine for RTP proxying.
- The issue only occurs on startup. E.g., after a VM reboot hosting our Kamailio
container, after deploying an updated Docker container onto the VM, or just after
restarting the docker container.
- Out of business hours, when the instance doesn't handle any traffic, we can't
reproduce the issue.
- We've been running 5.7.4 for about two months. We did the upgrade out of
hours so the initial upgrade didn't trigger the issue. The issue occurred during
redeployments yesterday and today, while the instance was handling traffic. We
saw a few dozen segfaults as we troubleshooted the issue during the incidents
yesterday and today. After business hours, we couldn't reproduce the issue.
- We've been doing regular kamailio upgrades to the latest 5.4.x-5.7.x versions
and this instance has been around for years without any similar issues or
significant configuration changes.
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send
an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe: