TLS module not working - sr-users

13 Jan 2012

Hello,

I'm trying to upgrade my company's sip server to the latest Kamailio to 3.1.5.
My development environment contained Openssl 0.9.8K version and everything works fine
here.

I have tried to install a fresh package for my release, the openssl version from the
Ubuntu packages is Openssl 1.0.0e
And I get the following error.

My error looks like this:
sudo /etc/init.d/kamailio start
Not starting kamailio: invalid configuration file!
-e
 0(26880) ERROR: <core> [sr_module.c:523]: ERROR: load_module: could not open module
</home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules/tls.so>:
/home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules/tls.so:
undefined symbol: SSLv2_client_method
0(26880) : <core> [cfg.y:3416]: parse error in config file
/home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/etc/kamailio/kamailio.cfg,
line 259, column 12-19: failed to load module
0(26880) WARNING: <core> [sr_module.c:578]:
/home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules_k/perl.so:
exports dlflags interface is deprecated and it will not be supported in newer versions;
consider using mod_register() instead
0(26880) ERROR: <core> [modparam.c:161]: set_mod_param_regex: No module matching
<tls> found
0(26880) : <core> [cfg.y:3419]: parse error in config file
/home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/etc/kamailio/kamailio.cfg,
line 437, column 118: Can't set module parameter
ERROR: bad config file (2 errors)

I'm not sure if this is a compatibility issue or is there some library missing that I
have to install.


I saw this patch online with reference to Crypt-SSLeay at
https://rt.cpan.org/Public/Bug/Display.html?id=70565

*The linker complains about missing SSLv2_method. The following patch works for me:*

--- SSLeay.xs~ 2011-08-29 07:25:46.000000000 +0200
+++ SSLeay.xs 2011-08-29 07:29:04.000000000 +0200
@@ -125,13 +125,9 @@
   if(ssl_version == 23) {
       ctx = SSL_CTX_new(SSLv23_client_method());
    }
-   else if(ssl_version == 3) {
+   else {
       ctx = SSL_CTX_new(SSLv3_client_method());
    }
-   else {
-      /* v2 is the default */
-      ctx = SSL_CTX_new(SSLv2_client_method());
-   }
    SSL_CTX_set_options(ctx,SSL_OP_ALL|0);
    SSL_CTX_set_default_verify_paths(ctx);
    SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);



    