sr-dev May 2023

sr-dev@lists.kamailio.org

16 participants
319 discussions

Re: [kamailio/kamailio] tls_wolfssl: use wolfssl lib from system if available (14b1f79)

by Victor Seva

@space88man do we need to build wolfssl because we can't use wolfssl coming from distributions? -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/commit/14b1f79c29f317c74bbcbba75853ce4… You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/commit/14b1f79c29f317c74bbcbba75853ce45c353a865/113383355(a)github.com>

11 months, 2 weeks

git:master:14b1f79c: tls_wolfssl: use wolfssl lib from system if available

by Victor Seva

Module: kamailio Branch: master Commit: 14b1f79c29f317c74bbcbba75853ce45c353a865 URL: https://github.com/kamailio/kamailio/commit/14b1f79c29f317c74bbcbba75853ce4… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T13:35:48+02:00 tls_wolfssl: use wolfssl lib from system if available --- Modified: src/modules/tls_wolfssl/Makefile --- Diff: https://github.com/kamailio/kamailio/commit/14b1f79c29f317c74bbcbba75853ce4… Patch: https://github.com/kamailio/kamailio/commit/14b1f79c29f317c74bbcbba75853ce4… --- diff --git a/src/modules/tls_wolfssl/Makefile b/src/modules/tls_wolfssl/Makefile index 75ec31b204d..0eaa83c615f 100644 --- a/src/modules/tls_wolfssl/Makefile +++ b/src/modules/tls_wolfssl/Makefile @@ -8,6 +8,12 @@ include ../../Makefile.defs auto_gen= NAME=tls_wolfssl.so +WOLF_BUILDER = $(shell \ + if pkg-config --exists wolfssl; then \ + echo 'pkg-config wolfssl'; \ + fi) + +ifeq ($(WOLF_BUILDER),) WOLFSSL_PREFIX = ../../../misc/external/wolfssl/build WOLFSSL_SRC = ../../../misc/external/wolfssl/wolfssl @@ -33,6 +39,12 @@ $(WOLFSSL_PREFIX)/include/wolfssl/options.h $(WOLFSSL_PREFIX)/lib/libwolfssl.a: @$(MAKE) -C $(WOLFSSL_SRC) install $(NAME): $(WOLFSSL_PREFIX)/lib/libwolfssl.a +else + DEFS += $(shell $(WOLF_BUILDER) --cflags) + LIBS += $(shell $(WOLF_BUILDER) --libs) + + include ../../Makefile.modules +endif clean-wolfssl: @rm -rf $(WOLFSSL_PREFIX)/{bin,include,share,lib}; \

11 months, 2 weeks

git:5.7:8ed9cf81: tls_wolfssl: use wolfssl lib from system if available

by Victor Seva

Module: kamailio Branch: 5.7 Commit: 8ed9cf81c045d7946b07d8c98686acf92cd68776 URL: https://github.com/kamailio/kamailio/commit/8ed9cf81c045d7946b07d8c98686acf… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T13:42:27+02:00 tls_wolfssl: use wolfssl lib from system if available (cherry picked from commit 14b1f79c29f317c74bbcbba75853ce45c353a865) --- Modified: src/modules/tls_wolfssl/Makefile --- Diff: https://github.com/kamailio/kamailio/commit/8ed9cf81c045d7946b07d8c98686acf… Patch: https://github.com/kamailio/kamailio/commit/8ed9cf81c045d7946b07d8c98686acf… --- diff --git a/src/modules/tls_wolfssl/Makefile b/src/modules/tls_wolfssl/Makefile index 75ec31b204d..0eaa83c615f 100644 --- a/src/modules/tls_wolfssl/Makefile +++ b/src/modules/tls_wolfssl/Makefile @@ -8,6 +8,12 @@ include ../../Makefile.defs auto_gen= NAME=tls_wolfssl.so +WOLF_BUILDER = $(shell \ + if pkg-config --exists wolfssl; then \ + echo 'pkg-config wolfssl'; \ + fi) + +ifeq ($(WOLF_BUILDER),) WOLFSSL_PREFIX = ../../../misc/external/wolfssl/build WOLFSSL_SRC = ../../../misc/external/wolfssl/wolfssl @@ -33,6 +39,12 @@ $(WOLFSSL_PREFIX)/include/wolfssl/options.h $(WOLFSSL_PREFIX)/lib/libwolfssl.a: @$(MAKE) -C $(WOLFSSL_SRC) install $(NAME): $(WOLFSSL_PREFIX)/lib/libwolfssl.a +else + DEFS += $(shell $(WOLF_BUILDER) --cflags) + LIBS += $(shell $(WOLF_BUILDER) --libs) + + include ../../Makefile.modules +endif clean-wolfssl: @rm -rf $(WOLFSSL_PREFIX)/{bin,include,share,lib}; \

11 months, 2 weeks

git:master:d858378b: github: refresh branches [skip ci]

by Victor Seva

Module: kamailio Branch: master Commit: d858378b722da6a44d937250e0985eddd31663b3 URL: https://github.com/kamailio/kamailio/commit/d858378b722da6a44d937250e0985ed… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T12:18:49+02:00 github: refresh branches [skip ci] --- Modified: .github/workflows/main.yml --- Diff: https://github.com/kamailio/kamailio/commit/d858378b722da6a44d937250e0985ed… Patch: https://github.com/kamailio/kamailio/commit/d858378b722da6a44d937250e0985ed… --- diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 71b9d6c5480..ddec775816c 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -4,8 +4,6 @@ name: build push: branches: - master - - '5.6' - - '5.5' # Allows you to run this workflow manually from the Actions tab workflow_dispatch: permissions:

11 months, 2 weeks

git:5.7:5e8ea292: github: refresh branch [skip ci]

by Victor Seva

Module: kamailio Branch: 5.7 Commit: 5e8ea292e4d5e403509f75016f1685d793912a1f URL: https://github.com/kamailio/kamailio/commit/5e8ea292e4d5e403509f75016f1685d… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T12:17:59+02:00 github: refresh branch [skip ci] --- Modified: .github/workflows/main.yml --- Diff: https://github.com/kamailio/kamailio/commit/5e8ea292e4d5e403509f75016f1685d… Patch: https://github.com/kamailio/kamailio/commit/5e8ea292e4d5e403509f75016f1685d… --- diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 71b9d6c548..0b8894a937 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -3,9 +3,7 @@ name: build 'on': push: branches: - - master - - '5.6' - - '5.5' + - '5.7' # Allows you to run this workflow manually from the Actions tab workflow_dispatch: permissions:

11 months, 2 weeks

git:5.7:c9de94ed: pkg/kamailio/deb: introduce wolftls package

by Victor Seva

Module: kamailio Branch: 5.7 Commit: c9de94ede7e6127b824c7d0667b306eef5c11127 URL: https://github.com/kamailio/kamailio/commit/c9de94ede7e6127b824c7d0667b306e… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T11:27:05+02:00 pkg/kamailio/deb: introduce wolftls package (cherry picked from commit 13430c2e8b9fccf7565ddcf38dcab8e516cebef0) --- Modified: pkg/kamailio/deb/bionic/rules Modified: pkg/kamailio/deb/bookworm/control Modified: pkg/kamailio/deb/bookworm/rules Modified: pkg/kamailio/deb/bullseye/rules Modified: pkg/kamailio/deb/buster/rules Modified: pkg/kamailio/deb/debian/backports/bionic Modified: pkg/kamailio/deb/debian/backports/bullseye Modified: pkg/kamailio/deb/debian/backports/buster Modified: pkg/kamailio/deb/debian/backports/focal Modified: pkg/kamailio/deb/debian/backports/jessie Modified: pkg/kamailio/deb/debian/backports/precise Modified: pkg/kamailio/deb/debian/backports/stretch Modified: pkg/kamailio/deb/debian/backports/trusty Modified: pkg/kamailio/deb/debian/backports/wheezy Modified: pkg/kamailio/deb/debian/backports/xenial Modified: pkg/kamailio/deb/debian/control Modified: pkg/kamailio/deb/debian/rules Modified: pkg/kamailio/deb/focal/rules Modified: pkg/kamailio/deb/jammy/control Modified: pkg/kamailio/deb/jammy/rules Modified: pkg/kamailio/deb/jessie/rules Modified: pkg/kamailio/deb/precise/rules Modified: pkg/kamailio/deb/sid/control Modified: pkg/kamailio/deb/sid/rules Modified: pkg/kamailio/deb/stretch/rules Modified: pkg/kamailio/deb/trusty/rules Modified: pkg/kamailio/deb/wheezy/rules Modified: pkg/kamailio/deb/xenial/rules --- Diff: https://github.com/kamailio/kamailio/commit/c9de94ede7e6127b824c7d0667b306e… Patch: https://github.com/kamailio/kamailio/commit/c9de94ede7e6127b824c7d0667b306e…

11 months, 2 weeks

git:master:13430c2e: pkg/kamailio/deb: introduce wolftls package

by Victor Seva

Module: kamailio Branch: master Commit: 13430c2e8b9fccf7565ddcf38dcab8e516cebef0 URL: https://github.com/kamailio/kamailio/commit/13430c2e8b9fccf7565ddcf38dcab8e… Author: Victor Seva <linuxmaniac(a)torreviejawireless.org> Committer: Victor Seva <linuxmaniac(a)torreviejawireless.org> Date: 2023-05-15T11:26:34+02:00 pkg/kamailio/deb: introduce wolftls package --- Modified: pkg/kamailio/deb/bionic/rules Modified: pkg/kamailio/deb/bookworm/control Modified: pkg/kamailio/deb/bookworm/rules Modified: pkg/kamailio/deb/bullseye/rules Modified: pkg/kamailio/deb/buster/rules Modified: pkg/kamailio/deb/debian/backports/bionic Modified: pkg/kamailio/deb/debian/backports/bullseye Modified: pkg/kamailio/deb/debian/backports/buster Modified: pkg/kamailio/deb/debian/backports/focal Modified: pkg/kamailio/deb/debian/backports/jessie Modified: pkg/kamailio/deb/debian/backports/precise Modified: pkg/kamailio/deb/debian/backports/stretch Modified: pkg/kamailio/deb/debian/backports/trusty Modified: pkg/kamailio/deb/debian/backports/wheezy Modified: pkg/kamailio/deb/debian/backports/xenial Modified: pkg/kamailio/deb/debian/control Modified: pkg/kamailio/deb/debian/rules Modified: pkg/kamailio/deb/focal/rules Modified: pkg/kamailio/deb/jammy/control Modified: pkg/kamailio/deb/jammy/rules Modified: pkg/kamailio/deb/jessie/rules Modified: pkg/kamailio/deb/precise/rules Modified: pkg/kamailio/deb/sid/control Modified: pkg/kamailio/deb/sid/rules Modified: pkg/kamailio/deb/stretch/rules Modified: pkg/kamailio/deb/trusty/rules Modified: pkg/kamailio/deb/wheezy/rules Modified: pkg/kamailio/deb/xenial/rules --- Diff: https://github.com/kamailio/kamailio/commit/13430c2e8b9fccf7565ddcf38dcab8e… Patch: https://github.com/kamailio/kamailio/commit/13430c2e8b9fccf7565ddcf38dcab8e…

11 months, 2 weeks

git:master:4a20e2fd: kamctl/xhttp_pi: regenerated content from db xml schema

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: 4a20e2fdb2f0c0fa7366f7646ed35b80df87fa07 URL: https://github.com/kamailio/kamailio/commit/4a20e2fdb2f0c0fa7366f7646ed35b8… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2023-05-15T11:24:04+02:00 kamctl/xhttp_pi: regenerated content from db xml schema --- Modified: utils/kamctl/xhttp_pi/acc-mod Modified: utils/kamctl/xhttp_pi/alias_db-mod Modified: utils/kamctl/xhttp_pi/auth_db-mod Modified: utils/kamctl/xhttp_pi/avpops-mod Modified: utils/kamctl/xhttp_pi/carrierroute-mod Modified: utils/kamctl/xhttp_pi/cpl-mod Modified: utils/kamctl/xhttp_pi/dialog-mod Modified: utils/kamctl/xhttp_pi/dialplan-mod Modified: utils/kamctl/xhttp_pi/dispatcher-mod Modified: utils/kamctl/xhttp_pi/domain-mod Modified: utils/kamctl/xhttp_pi/domainpolicy-mod Modified: utils/kamctl/xhttp_pi/drouting-mod Modified: utils/kamctl/xhttp_pi/group-mod Modified: utils/kamctl/xhttp_pi/htable-mod Modified: utils/kamctl/xhttp_pi/imc-mod Modified: utils/kamctl/xhttp_pi/lcr-mod Modified: utils/kamctl/xhttp_pi/matrix-mod Modified: utils/kamctl/xhttp_pi/mohqueue-mod Modified: utils/kamctl/xhttp_pi/msilo-mod Modified: utils/kamctl/xhttp_pi/mtree-mod Modified: utils/kamctl/xhttp_pi/pdt-mod Modified: utils/kamctl/xhttp_pi/permissions-mod Modified: utils/kamctl/xhttp_pi/pi_framework.xml Modified: utils/kamctl/xhttp_pi/pipelimit-mod Modified: utils/kamctl/xhttp_pi/presence-mod Modified: utils/kamctl/xhttp_pi/purple-mod Modified: utils/kamctl/xhttp_pi/registrar-mod Modified: utils/kamctl/xhttp_pi/rls-mod Modified: utils/kamctl/xhttp_pi/rtpengine-mod Modified: utils/kamctl/xhttp_pi/rtpproxy-mod Modified: utils/kamctl/xhttp_pi/sca-mod Modified: utils/kamctl/xhttp_pi/secfilter-mod Modified: utils/kamctl/xhttp_pi/siptrace-mod Modified: utils/kamctl/xhttp_pi/speeddial-mod Modified: utils/kamctl/xhttp_pi/standard-mod Modified: utils/kamctl/xhttp_pi/topos-mod Modified: utils/kamctl/xhttp_pi/uac-mod Modified: utils/kamctl/xhttp_pi/uid_auth_db-mod Modified: utils/kamctl/xhttp_pi/uid_avp_db-mod Modified: utils/kamctl/xhttp_pi/uid_domain-mod Modified: utils/kamctl/xhttp_pi/uid_gflags-mod Modified: utils/kamctl/xhttp_pi/uid_uri_db-mod Modified: utils/kamctl/xhttp_pi/uri_db-mod Modified: utils/kamctl/xhttp_pi/userblocklist-mod Modified: utils/kamctl/xhttp_pi/usrloc-mod --- Diff: https://github.com/kamailio/kamailio/commit/4a20e2fdb2f0c0fa7366f7646ed35b8… Patch: https://github.com/kamailio/kamailio/commit/4a20e2fdb2f0c0fa7366f7646ed35b8…

11 months, 2 weeks

SHM and PKG memory mixup during tracing in onsend_route for localy generated request leads to memory leaks

by Ovidiu Sas

Hello, While troubleshooting a memory leak, I noticed that we are mixing SHM memory with PKG memory during hep tracing. When the dispatcher timer is scheduled for OPTION pings, the ds_ping_set() is called and the tm module is engaged to handle the ping. dispatcher: dispatcher.c ds_ping_set() tmb.t_request Inside the tm module, a new cell is created and the SIP message is cloned for further processing via sip_msg_cloner() and later on the onsend_route is engaged: tm: uac.c: request() t_uac() t_uac_with_ids() t_uac_prepare() new_cell->uas.request = sip_msg_cloner(&lreq, &sip_msg_len); core: sip_msg_shm_clone() (we are cloning the msg in SHM) send_prepared_request_impl(SHM pointer) run_onsend(SHM pointer) Inside the onsend_route we call siptrace() and we go like this: siptrace: siptrace_send.c sip_trace_prepare(SHM pointer) parser: parse_from_header(SHM pointer) we allocate PKG mem that is leaked parse_to() parse_addr_spec() we allocate PKG mem that is leaked Later on, the SHM memory block is released by the free_cell_helper(): sip_msg_free_unsafe(dead_cell->uas.request); This was a misconfiguration, because the siptrace was configured to automatically mirror all SIP traffic and the call for siptrace() in the onsend_route was not necessary. Perhaps siptrace() should be a noop when trace_mode is not 0. Here are the siptrace params: loadmodule "siptrace.so" modparam("siptrace", "db_url", DBMYSQL) modparam("siptrace", "duplicate_uri", SIPTRACE_SVR_IP) modparam("siptrace", "send_sock_addr", SIPTRACE_OUT_IP) modparam("siptrace", "hep_mode_on", 1) modparam("siptrace", "hep_version", 3) modparam("siptrace", "trace_to_database", 0) modparam("siptrace", "trace_flag", 22) modparam("siptrace", "trace_on", 1) modparam("siptrace", "evcb_msg", "ksr_siptrace_msg") modparam("siptrace", "trace_mode", 1) This is happening on the latest version of kamailio 5.6. -ovidiu

11 months, 2 weeks

git:master:8f7c0893: modules: readme files regenerated - tls ... [skip ci]

by Kamailio Dev

Module: kamailio Branch: master Commit: 8f7c0893f0c53b9f399cfa0989fecd9bd15b344d URL: https://github.com/kamailio/kamailio/commit/8f7c0893f0c53b9f399cfa0989fecd9… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2023-05-12T17:31:24+02:00 modules: readme files regenerated - tls ... [skip ci] --- Modified: src/modules/tls/README --- Diff: https://github.com/kamailio/kamailio/commit/8f7c0893f0c53b9f399cfa0989fecd9… Patch: https://github.com/kamailio/kamailio/commit/8f7c0893f0c53b9f399cfa0989fecd9… --- diff --git a/src/modules/tls/README b/src/modules/tls/README index 7198c455293..f721ba81d61 100644 --- a/src/modules/tls/README +++ b/src/modules/tls/README @@ -676,11 +676,12 @@ Place holder If RFC 3261 conformance is desired, at least TLSv1 must be used. For compatibility with older clients SSLv23 is the option, but again, be - aware of security concerns, SSLv2/3 being considered very insecure by - 2014. For current information about what's considered secure, please - consult, IETF BCP 195, currently RFC 7525 - "Recommendations for Secure - Use of Transport Layer Security (TLS) and Datagram Transport Layer - Security (DTLS)" + aware of security concerns, SSLv2/3 as well as TLS v1.0 and v1.1 are + being considered very insecure and are therefore deprecated since March + 2021 (RFC 8996). For current information about what's considered + secure, please consult, IETF BCP 195, currently RFC 9325 - + "Recommendations for Secure Use of Transport Layer Security (TLS) and + Datagram Transport Layer Security (DTLS)" Example 1.3. Set tls_method parameter ...

11 months, 3 weeks

← Newer
1
...
21
22
23
24
25
26
27
...
32
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev May 2023