<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello,</p>
<p>libssl 1.1.x should be better and there is nothing wrong using
it. I expected that not so many 1.0.x versions were affected by
the issue.</p>
<p>The packages for suse were built because of opensuse build
system, but not sure if anyone were using them in the past to be
sure that they work properly.<br>
</p>
Cheers,<br>
Daniel<br>
<br>
<div class="moz-cite-prefix">On 13.12.17 21:41, Tomi Hakkarainen
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0C0BD8F0-A068-4EEA-9C87-989927E6D5D7@gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
Hi,
<div class=""><br class="">
</div>
<div class="">Do you see something wrong by using that 1.1.0g
version ?</div>
<div class="">or just astonished it did not work with those 1.0.x
versions...</div>
<div class=""><br class="">
</div>
<div class="">I’m not so familiar with Suse and its perks in here
-> would prefer debian/Ubuntu myself but this was handed to
me so I have to live with it for now… unless.</div>
<div class=""><br class="">
</div>
<div class="">If needed I could test downgrading opnessl but did
not yet find how it could be done :) sorry</div>
<div class=""><br class="">
</div>
<div class="">ps. I'm very pleased and happy for your involvement
in this. So warm welcome to Kamailio world, thank you..</div>
<div class=""><br class="">
</div>
<div class="">Tomi<br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 13 Dec 2017, at 19.50, Daniel-Constantin
Mierla <<a href="mailto:miconda@gmail.com" class=""
moz-do-not-send="true">miconda@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8" class="">
<div text="#000000" bgcolor="#FFFFFF" class="">
<p class="">Hello,</p>
<p class="">there should be also good openssl 1.0.x
versions, maybe the problem was the order of modules.
Can you list all loadmodule line from your
kamailio.cfg?</p>
<p class="">Cheers,<br class="">
Daniel<br class="">
</p>
<br class="">
<div class="moz-cite-prefix">On 13.12.17 00:20, Tomi
Hakkarainen wrote:<br class="">
</div>
<blockquote type="cite"
cite="mid:E38F1AB9-6F2B-4EDB-9D50-74A7EA08A800@gmail.com"
class="">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8" class="">
Hello,
<div class=""><br class="">
</div>
<div class="">I finally got Kamailio to start with
TLS.</div>
<div class="">I tried with multiple openssl versions
last with </div>
<div class="">
<div style="margin: 0px; font-stretch: normal;
line-height: normal; font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0, 0.901961);"
class=""><span style="font-variant-ligatures:
no-common-ligatures" class="">openssl version</span></div>
<div style="margin: 0px; font-stretch: normal;
line-height: normal; font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0, 0.901961);"
class=""><span style="font-variant-ligatures:
no-common-ligatures" class="">OpenSSL 1.1.0g 2
Nov 2017</span></div>
<div class=""><br class="">
</div>
<div class="">also updated Kamailio to 5.0.4 from
Suse repo's</div>
<div class="">and had no luck with those two.</div>
<div class=""><br class="">
</div>
<div class="">I decided to compile Kamailio 5.1 and
with little fling with database I think I overcame
the TLS starting trouble… </div>
<div class="">Now it cranshes as it cannot connect
to Asterisk DB -> will jack with that tomorrow.</div>
<div class=""><br class="">
</div>
<div class="">Thank you for your guidance as with it
I focused on the openssl and finally have I hope
working setup...</div>
<div class=""><br class="">
</div>
<div class="">Regards,</div>
<div class=""> Tomi</div>
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 12 Dec 2017, at 10.26,
Daniel-Constantin Mierla <<a
href="mailto:miconda@gmail.com" class=""
moz-do-not-send="true">miconda@gmail.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="Content-Type"
content="text/html; charset=utf-8" class="">
<div text="#000000" bgcolor="#FFFFFF" class="">
<p class="">Hello,</p>
<p class="">there were some broken versions
of openssl that didn't allow anymore to
set custom memory manager. The only option
is to upgrade libssl to a version that
doesn't expose the issue. If you search on
kamailio issues tracker on <a
href="http://github.com/" class=""
moz-do-not-send="true">github.com</a>,
there should be one closed about this
topic.</p>
<p class="">Cheers,<br class="">
Daniel<br class="">
</p>
<br class="">
<div class="moz-cite-prefix">On 11.12.17
22:20, Tomi Hakkarainen wrote:<br class="">
</div>
<blockquote type="cite"
cite="mid:E76998E9-827E-423B-B93E-D681D9F2A26B@gmail.com"
class="">
<meta http-equiv="Content-Type"
content="text/html; charset=utf-8"
class="">
Hi,
<div class=""> </div>
<div class="">
<div class="">I have problem to enable
TLS on just installed Kamailio server </div>
<div class="">
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class="">openSUSE
42.3 (x86_64)</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class="">VERSION
= 42.3</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class="">CODENAME
= Malachite</span></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">version:
kamailio 5.0.4 (x86_64/linux) </span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">flags:
STATS: Off, USE_TCP, USE_TLS,
USE_SCTP, TLS_HOOKS,
DISABLE_NAGLE, USE_MCAST,
DNS_IP_HACK, SHM_MEM, SHM_MMAP,
PKG_MALLOC, Q_MALLOC, F_MALLOC,
TLSF_MALLOC, DBG_SR_MEMORY,
USE_FUTEX,
FAST_LOCK-ADAPTIVE_WAIT,
USE_DNS_CACHE, USE_DNS_FAILOVER,
USE_NAPTR, USE_DST_BLACKLIST,
HAVE_RESOLV_RES</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">ADAPTIVE_WAIT_LOOPS=1024,
MAX_RECV_BUFFER_SIZE 262144,
MAX_LISTEN 16, MAX_URI_SIZE 1024,
BUF_SIZE 65535, DEFAULT PKG_SIZE
8MB</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">poll
method support: poll, epoll_lt,
epoll_et, sigio_rt, select.</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">id:
unknown </span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">compiled
on 18:06:25 Dec 3 2017 with gcc
4.8.5</span></div>
</div>
<div class=""><br class="">
</div>
<div class="">I get this on debug log:</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/cfg.y:1642]: yyparse():
loading modules under
/usr/lib64/kamailio/modules/</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class="">loading
modules under config path:
/usr/lib64/kamailio/modules/</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/cfg.y:1623]: yyparse():
loading module tls.so</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/sr_module.c:575]:
load_module(): trying to load
</usr/lib64/kamailio/modules/tls.so></span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/mem/q_malloc.c:189]:
qm_malloc_init(): qm_malloc_init:
QM_OPTIMIZE=16384, /ROUNDTO=2048</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/mem/q_malloc.c:191]:
qm_malloc_init(): qm_malloc_init:
QM_HASH_SIZE=2099, qm_block
size=235152</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/mem/q_malloc.c:193]:
qm_malloc_init():
qm_malloc_init(0x7f6e001cb000,
67108864), start=0x7f6e001cb000</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
DEBUG: <core>
[core/mem/q_malloc.c:202]:
qm_malloc_init(): qm_malloc_init:
size= 67108864,
init_overhead=235256</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
ERROR: tls [tls_init.c:595]:
tls_pre_init(): Unable to set the
memory allocation functions</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
ERROR: tls [tls_init.c:597]:
tls_pre_init(): libssl current mem
functions - m: 0x7f6e055b33d0 r:
0x7f6e055b3a30 f: 0x7f6e055b39a0</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
ERROR: tls [tls_init.c:599]:
tls_pre_init(): Be sure tls module
is loaded before any other module
using libssl (can be loaded first
to be safe)</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale
Mono"; color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures;" class=""> 0(11336)
ERROR: <core>
[core/sr_module.c:607]:
load_module():
/usr/lib64/kamailio/modules/tls.so:
mod_register failed</span></div>
</div>
</div>
<div class="">
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale Mono";
color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class=""> 0(11336)
CRITICAL: <core>
[core/cfg.y:3411]: yyerror_at():
parse error in config file
/etc/kamailio/kamailio.cfg, line
150, column 12-19: failed to load
module</span></div>
</div>
<div class=""><br class="">
</div>
<div class="">for resolving have compiled
openssl from 1.0.2j-fips to</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale Mono";
color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class="">openssl
version</span></div>
<div style="margin: 0px; font-stretch:
normal; line-height: normal;
font-family: "Andale Mono";
color: rgb(40, 254, 20);
background-color: rgba(0, 0, 0,
0.901961);" class=""><span
style="font-variant-ligatures:
no-common-ligatures" class="">OpenSSL
1.0.2n 7 Dec 2017</span></div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Is this information enough
to see what we are missing </div>
<div class="">Will provide more info if
needed.</div>
<div class="">Any help and suggestions are
appreciated.</div>
<div class=""><br class="">
</div>
<div class="">Regards, </div>
<div class="">T</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre class="" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org" moz-do-not-send="true">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<br class="">
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - <a class="moz-txt-link-abbreviated" href="http://www.asipto.com/" moz-do-not-send="true">www.asipto.com</a>
Kamailio World Conference - May 14-16, 2018 - <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com/" moz-do-not-send="true">www.kamailioworld.com</a></pre>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
<br class="">
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - <a class="moz-txt-link-abbreviated" href="http://www.asipto.com/" moz-do-not-send="true">www.asipto.com</a>
Kamailio World Conference - May 14-16, 2018 - <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com/" moz-do-not-send="true">www.kamailioworld.com</a></pre>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
Kamailio World Conference - May 14-16, 2018 - <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a></pre>
</body>
</html>