THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
A new Flyspray task has been opened. Details are below.
User who did this - Shaobin.Feng (saxon_leo)
Attached to Project - sip-router
Summary - kamailio tls debug error
Task Type - Bug Report
Category - tls
Status - Unconfirmed
Assigned To -
Operating System - Linux
Severity - Low
Priority - Normal
Reported Version - 3.2
Due in Version - Undecided
Due Date - Undecided
Details - kamailio keeps debuging follows:
"ERROR: tls [tls_server.c:1174]: TLS accept:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac"
Well,I used command (openssl s_client -connect host:port -no_ssl2 -bugs) to connect to kamailio, it returns normal.
So, this really confuse me,is there something wrong or not?
Is there any other method can check the tls module works normal or not? Any suggestion will be nice.
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=245
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
Module: sip-router
Branch: master
Commit: 0615826fe602c5183fbc7be7c51de5eb5eb7223c
URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=0615826…
Author: Daniel-Constantin Mierla <miconda(a)gmail.com>
Committer: Daniel-Constantin Mierla <miconda(a)gmail.com>
Date: Wed Jul 18 19:00:38 2012 +0200
tls: set function to return the id
- starting with v1.0.0 openssl does not use anymore getpid(), but address
of errno which can point to same virtual address in a multi-process
application
- for refrence http://www.openssl.org/docs/crypto/threads.html
- credits to Jijo on sr-dev mailing list
---
modules/tls/tls_locking.c | 13 ++++++++++---
1 files changed, 10 insertions(+), 3 deletions(-)
diff --git a/modules/tls/tls_locking.c b/modules/tls/tls_locking.c
index 86bda17..d85b14c 100644
--- a/modules/tls/tls_locking.c
+++ b/modules/tls/tls_locking.c
@@ -130,6 +130,10 @@ void tls_destroy_locks()
}
+unsigned long sr_ssl_id_f()
+{
+ return my_pid();
+}
/* returns -1 on error, 0 on success */
int tls_init_locks()
@@ -163,10 +167,13 @@ int tls_init_locks()
CRYPTO_set_dynlock_lock_callback(dyn_lock_f);
CRYPTO_set_dynlock_destroy_callback(dyn_destroy_f);
- /* thread id callback: not needed because ser doesn't use thread and
- * openssl already uses getpid() (by default)
- * CRYPTO_set_id_callback(id_f);
+ /* starting with v1.0.0 openssl does not use anymore getpid(), but address
+ * of errno which can point to same virtual address in a multi-process
+ * application
+ * - for refrence http://www.openssl.org/docs/crypto/threads.html
*/
+ CRYPTO_set_id_callback(sr_ssl_id_f);
+
/* atomic add -- since for now we don't have atomic_add
* (only atomic_inc), fallback to the default use-locks mode
* CRYPTO_set_add_lock_callback(atomic_add_f);
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task is now closed:
FS#246 - pua_reginfo adds duplicate cseq field in XML body
User who did this - Carsten Bock (carstenbock)
Reason for closing: Fixed
Additional comments about closing: Fixed in master and 3.3 (bug was not present in 3.2). Thank you!
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=246
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
Carsten Bock has taken ownership of the following task:
FS#246 - pua_reginfo adds duplicate cseq field in XML body
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=246
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.