sr-dev May 2024

sr-dev@lists.kamailio.org

15 participants
163 discussions

git:master:2e2b22a0: Makefile.defs: version set to 6.0.0-dev2

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: 2e2b22a097139239b8493bfdd777530a9795ad66 URL: https://github.com/kamailio/kamailio/commit/2e2b22a097139239b8493bfdd777530… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2024-05-16T09:25:33+02:00 Makefile.defs: version set to 6.0.0-dev2 - next major release series is going to be 6.0.x --- Modified: src/Makefile.defs --- Diff: https://github.com/kamailio/kamailio/commit/2e2b22a097139239b8493bfdd777530… Patch: https://github.com/kamailio/kamailio/commit/2e2b22a097139239b8493bfdd777530… --- diff --git a/src/Makefile.defs b/src/Makefile.defs index 9feece65535..99157d2c017 100644 --- a/src/Makefile.defs +++ b/src/Makefile.defs @@ -104,10 +104,10 @@ endif INSTALL_FLAVOUR=$(FLAVOUR) # version number -VERSION = 5 -PATCHLEVEL = 9 +VERSION = 6 +PATCHLEVEL = 0 SUBLEVEL = 0 -EXTRAVERSION = -dev1 +EXTRAVERSION = -dev2 # memory manager switcher # 0 - f_malloc (fast malloc)

4 months

[kamailio/kamailio] p_usrloc: use a global all_columns variable in db_load* functions (PR #3845)

by Lucian Balaceanu

#### Pre-Submission Checklist    - [ ] Commit message has the format required by CONTRIBUTING guide - [ ] Commits are split per component (core, individual modules, libs, utils, ...) - [ ] Each component has a single commit (if not, squash them into one commit) - [ ] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [ ] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [ ] PR should be backported to stable branches - [ ] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3845 -- Commit Summary -- * p_usrloc: use a global all_columns variable in db_load* functions -- File Changes -- M src/modules/p_usrloc/udomain.c (157) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3845.patch https://github.com/kamailio/kamailio/pull/3845.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3845 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3845(a)github.com>

4 months

git:master:ccfb5a0f: auth: point auth_algorithm to a static list values

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: ccfb5a0f852bf101c1e2ef46f08192921a4d963f URL: https://github.com/kamailio/kamailio/commit/ccfb5a0f852bf101c1e2ef46f081929… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2024-05-15T22:03:43+02:00 auth: point auth_algorithm to a static list values - function parameters can be overwritten by subsequent functions --- Modified: src/modules/auth/auth_mod.c --- Diff: https://github.com/kamailio/kamailio/commit/ccfb5a0f852bf101c1e2ef46f081929… Patch: https://github.com/kamailio/kamailio/commit/ccfb5a0f852bf101c1e2ef46f081929… --- diff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index 2fcb9169f26..6517dce566a 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -135,6 +135,17 @@ static struct qp auth_qauthint = {STR_STATIC_INIT("auth-int"), QOP_AUTHINT}; /* Hash algorithm used for digest authentication, MD5 if empty */ str auth_algorithm = {"", 0}; + +#define AUTH_ALG_MD5_IDX 0 +#define AUTH_ALG_SHA256_IDX 1 +/* clang-format off */ +static str auth_algorithm_list[] = { + {"MD5", 3}, + {"SHA-256", 7}, + {NULL, 0} +}; +/* clang-format on */ + int hash_hex_len; int add_authinfo_hdr = 0; /* should an Authentication-Info header be added on 200 OK responses? */ @@ -373,10 +384,12 @@ static int mod_init(void) } if(auth_algorithm.len == 0 || strcmp(auth_algorithm.s, "MD5") == 0) { + auth_algorithm = auth_algorithm_list[AUTH_ALG_MD5_IDX]; hash_hex_len = HASHHEXLEN; calc_HA1 = calc_HA1_md5; calc_response = calc_response_md5; } else if(strcmp(auth_algorithm.s, "SHA-256") == 0) { + auth_algorithm = auth_algorithm_list[AUTH_ALG_SHA256_IDX]; hash_hex_len = HASHHEXLEN_SHA256; calc_HA1 = calc_HA1_sha256; calc_response = calc_response_sha256; @@ -493,10 +506,12 @@ static int ki_auth_algorithm(sip_msg_t *msg, str *alg) auth_algorithm = *alg; if(strcmp(auth_algorithm.s, "MD5") == 0) { + auth_algorithm = auth_algorithm_list[AUTH_ALG_MD5_IDX]; hash_hex_len = HASHHEXLEN; calc_HA1 = calc_HA1_md5; calc_response = calc_response_md5; } else if(strcmp(auth_algorithm.s, "SHA-256") == 0) { + auth_algorithm = auth_algorithm_list[AUTH_ALG_SHA256_IDX]; hash_hex_len = HASHHEXLEN_SHA256; calc_HA1 = calc_HA1_sha256; calc_response = calc_response_sha256;

4 months

TLS.reload and memory usage of SSL_CTX structs

by Xenofon Karamanos

Hello all, I am currently looking into issue https://github.com/kamailio/kamailio/issues/3823 regarding the tls.reload and the constant increase in memory usage when it's called. I tried to look something up related to CRL and related functions for what causing it but nothing to obvious. The only culprit i could find was this function call in SSL_verify_load_locations in load_crl()<https://github.com/kamailio/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…>. But the same exact function is also called in load_ca_list() with no such behaviour. Next thing i notice, is that on the first rpc call of tls.reload, there is a "significant" memory allocation. What i mean by this is that when a fresh kamailio (5.8) is started up (with -m 7, for low shared memory availability to try and replicate the issue and children=2) and then check free shared memory usage using `kamcmd core.shmmem` is around 2196096 (bytes i am assuming) for my system. On the first call of tls.reload, it drops to 539248. That's a heavy drop so i started digging why on so much allocation is caused. When loading a tls configuration, ksr_fix_domain<https://github.com/kamailio/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…> allocates a new SSL_CTX per process. From what i am seeing this SSL_CTX, is basically the same for each one, with same configuration without any difference on settings. So, what i tried is to allocated it once (see tls_reload branch in my repo<https://github.com/kamailio/kamailio/compare/master...xkaraman:kamailio:tls…>), and just share this context to all of the process and the memory used is way less and also the unbounding memory seems to fixed or at least it's slowed that's barely visible. What are your thoughts on these? Is this something we can done? Is the assumption that tls config will and be the same for every process or can one somehow differentiate from another? Thanks, Xenofon Some numbers for anyone interested: Before the patch 5.8 branch and with settings such as -m 7 (shared memory) and children=2 (with children=8 it doesn't even start, failed to load cyphers in SSL_CTX): Fresh kamailio start shared memory: total: 7340032 free: 2196096 After one tls.reload: free: 539248 After 100 tls.reload: free: 483776 After patch on master (kamailio -m 7 and children=2) (with children=8 it starts normally): Fresh kamailio start shared memory: total: 7340032 free: 3772000 After one tls.reload: free: 3690192 After 100 tls.reload: free: 3681056 [https://repository-images.githubusercontent.com/15101579/2d895000-e695-11e9…]<https://github.com/kamailio/kamailio/compare/master...xkaraman:kamailio:tls…> Comparing kamailio:master...xkaraman:tls_reload · kamailio/kamailio<https://github.com/kamailio/kamailio/compare/master...xkaraman:kamailio:tls…> Kamailio - The Open Source SIP Server for large VoIP and real-time communication platforms - - Comparing kamailio:master...xkaraman:tls_reload · kamailio/kamailio github.com [https://opengraph.githubassets.com/a209e4474f30e5fb4ce474f928991f0fba268f02…]<https://github.com/xkaraman/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…> kamailio/src/modules/tls/tls_domain.c at 9c2705b566103f4fad0cad63bc1e36ba3cca621f · xkaraman/kamailio<https://github.com/xkaraman/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…> Kamailio - The Open Source SIP Server for large VoIP and real-time communication platforms - - xkaraman/kamailio github.com [https://repository-images.githubusercontent.com/15101579/2d895000-e695-11e9…]<https://github.com/kamailio/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…> kamailio/src/modules/tls/tls_domain.c at 9c2705b566103f4fad0cad63bc1e36ba3cca621f · kamailio/kamailio<https://github.com/kamailio/kamailio/blob/9c2705b566103f4fad0cad63bc1e36ba3…> Kamailio - The Open Source SIP Server for large VoIP and real-time communication platforms - - kamailio/kamailio github.com [https://opengraph.githubassets.com/f4de5f69f56ea5c12c56343428618441242c2518…]<https://github.com/kamailio/kamailio/issues/3823> Memory usage increases everytime tls.reload is executed · Issue #3823 · kamailio/kamailio<https://github.com/kamailio/kamailio/issues/3823> Description We are using Kamailio 5.7.4 on Debian 12 (from http://deb.kamailio.org/kamailio57) with rtpengine as an Edgeproxy for our clients. The instance terminates SIP/TLS (with Cliencertificate... github.com

4 months

git:master:922d7dfd: p_usrloc: use a global p_usrloc_columns variable in db_load* functions

by Lucian Balaceanu

Module: kamailio Branch: master Commit: 922d7dfd9ae7d13436c23d60f22d47c9c2fa127a URL: https://github.com/kamailio/kamailio/commit/922d7dfd9ae7d13436c23d60f22d47c… Author: Lucian Balaceanu <lucian.balaceanu(a)1and1.ro> Committer: Lucian Balaceanu <lucian.balaceanu(a)1and1.ro> Date: 2024-05-15T14:09:02+03:00 p_usrloc: use a global p_usrloc_columns variable in db_load* functions --- Modified: src/modules/p_usrloc/udomain.c --- Diff: https://github.com/kamailio/kamailio/commit/922d7dfd9ae7d13436c23d60f22d47c… Patch: https://github.com/kamailio/kamailio/commit/922d7dfd9ae7d13436c23d60f22d47c…

4 months, 1 week

[kamailio/kamailio] db_cluster: Update log levels and failed connection id (PR #3834)

by Xenofon Karamanos

#### Pre-Submission Checklist    - [x] Commit message has the format required by CONTRIBUTING guide - [x] Commits are split per component (core, individual modules, libs, utils, ...) - [x] Each component has a single commit (if not, squash them into one commit) - [x] No commits to README files for modules (changes must be done to docbook files in `doc/` subfolder, the README file is autogenerated) #### Type Of Change - [x] Small bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist:  - [x] PR should be backported to stable branches - [x] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description  This PR aims to update some warning levels used in `db_cluster` module to prevent silent failures. When `db_cluster` tries to do some action in a `db_connector`, it should log some kind of warning (with `conid` that failed) or error instead of debug. When iterating on db_connectors and one fails, it will log a warning with `conid` and if all of the available db are not available it will log an error indicating failure. You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3834 -- Commit Summary -- * db_cluster: Update log levels -- File Changes -- M src/modules/db_cluster/dbcl_api.c (83) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3834.patch https://github.com/kamailio/kamailio/pull/3834.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3834 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3834(a)github.com>

4 months, 1 week

git:master:467dbf3e: db_cluster: Update log levels

by Xenofon Karamanos

Module: kamailio Branch: master Commit: 467dbf3e1be16d5a760178d0801834ac67bad888 URL: https://github.com/kamailio/kamailio/commit/467dbf3e1be16d5a760178d0801834a… Author: Xenofon Karamanos <22965395+xkaraman(a)users.noreply.github.com> Committer: Xenofon Karamanos <22965395+xkaraman(a)users.noreply.github.com> Date: 2024-05-15T10:39:49+03:00 db_cluster: Update log levels --- Modified: src/modules/db_cluster/dbcl_api.c --- Diff: https://github.com/kamailio/kamailio/commit/467dbf3e1be16d5a760178d0801834a… Patch: https://github.com/kamailio/kamailio/commit/467dbf3e1be16d5a760178d0801834a…

4 months, 1 week

[kamailio/kamailio] Added new auth module function auth_algorithm (PR #3849)

by juha-h

#### Type Of Change - [ ] Small bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds new functionality) - [ ] Breaking change (fix or feature that would change existing functionality) #### Checklist: - [ ] PR should be backported to stable branches - [x] Tested changes locally - [ ] Related to issue #XXXX (replace XXXX with an open issue number) #### Description Added new Added new auth module function auth_algorithm that can be used to dynamically override algorithm parameter value. #### Note I was not able to test check README, because of this error: ``` /usr/src/orig/kamailio$ make modules-readme modules=modules/auth make -C src/ modules-readme make[1]: Entering directory '/usr/src/orig/kamailio/src' make --no-print-directory -C doc auth.txt xsltproc --novalid \ --nonet \ --novalid \ --stringparam output "auth.d" \ ../../../../doc/docbook/dep.xsl auth.xml xsltproc --novalid \ --xinclude \ ../../../../doc/docbook/txt.xsl auth.xml | lynx -nolist -stdin -dump > auth.txt error : Unknown IO error warning: failed to load external entity "http://docbook.sourceforge.net/release/xsl/current/xhtml/docbook.xsl" compilation error: file ../../../../doc/docbook/txt.xsl line 6 element import xsl:import : unable to load http://docbook.sourceforge.net/release/xsl/current/xhtml/docbook.xsl ``` You can view, comment on, or merge this pull request online at: https://github.com/kamailio/kamailio/pull/3849 -- Commit Summary -- * Added new auth module function auth_algorithm -- File Changes -- M src/modules/auth/auth_mod.c (37) M src/modules/auth/doc/auth_functions.xml (16) -- Patch Links -- https://github.com/kamailio/kamailio/pull/3849.patch https://github.com/kamailio/kamailio/pull/3849.diff -- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/pull/3849 You are receiving this because you are subscribed to this thread. Message ID: <kamailio/kamailio/pull/3849(a)github.com>

4 months, 1 week

git:master:18e4d38e: auth: export auth_algorithm(...) to kemi

by Daniel-Constantin Mierla

Module: kamailio Branch: master Commit: 18e4d38e4d57ce88cbe16eec4cfb2a5a1b5554a4 URL: https://github.com/kamailio/kamailio/commit/18e4d38e4d57ce88cbe16eec4cfb2a5… Author: Daniel-Constantin Mierla <miconda(a)gmail.com> Committer: Daniel-Constantin Mierla <miconda(a)gmail.com> Date: 2024-05-14T18:13:04+02:00 auth: export auth_algorithm(...) to kemi --- Modified: src/modules/auth/auth_mod.c --- Diff: https://github.com/kamailio/kamailio/commit/18e4d38e4d57ce88cbe16eec4cfb2a5… Patch: https://github.com/kamailio/kamailio/commit/18e4d38e4d57ce88cbe16eec4cfb2a5… --- diff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index b2854d468bf..2fcb9169f26 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -488,12 +488,9 @@ int w_has_credentials(sip_msg_t *msg, char *realm, char *s2) /** * */ -int w_auth_algorithm(sip_msg_t *msg, char *alg, char *s2) +static int ki_auth_algorithm(sip_msg_t *msg, str *alg) { - if(fixup_get_svalue(msg, (gparam_t *)alg, &auth_algorithm) < 0) { - LM_ERR("failed to get algorithm value\n"); - return -1; - } + auth_algorithm = *alg; if(strcmp(auth_algorithm.s, "MD5") == 0) { hash_hex_len = HASHHEXLEN; @@ -512,6 +509,21 @@ int w_auth_algorithm(sip_msg_t *msg, char *alg, char *s2) return 1; } +/** + * + */ +int w_auth_algorithm(sip_msg_t *msg, char *alg, char *s2) +{ + str salg = str_init(""); + + if(fixup_get_svalue(msg, (gparam_t *)alg, &salg) < 0) { + LM_ERR("failed to get algorithm value\n"); + return -1; + } + + return ki_auth_algorithm(msg, &salg); +} + #ifdef USE_NC /** * Calls auth_check_hdr_md5 with the update_nonce flag set to false. @@ -1384,6 +1396,11 @@ static sr_kemi_t sr_kemi_auth_exports[] = { { SR_KEMIP_STR, SR_KEMIP_INT, SR_KEMIP_STR, SR_KEMIP_NONE, SR_KEMIP_NONE, SR_KEMIP_NONE } }, + { str_init("auth"), str_init("auth_algorithm"), + SR_KEMIP_INT, ki_auth_algorithm, + { SR_KEMIP_STR, SR_KEMIP_NONE, SR_KEMIP_NONE, + SR_KEMIP_NONE, SR_KEMIP_NONE, SR_KEMIP_NONE } + }, { {0, 0}, {0, 0}, 0, NULL, { 0, 0, 0, 0, 0, 0 } } };

4 months, 1 week

git:master:4a7aa098: modules: readme files regenerated - auth ... [skip ci]

by Kamailio Dev

Module: kamailio Branch: master Commit: 4a7aa098281b608177c5da61e7a47067463267bf URL: https://github.com/kamailio/kamailio/commit/4a7aa098281b608177c5da61e7a4706… Author: Kamailio Dev <kamailio.dev(a)kamailio.org> Committer: Kamailio Dev <kamailio.dev(a)kamailio.org> Date: 2024-05-14T18:01:11+02:00 modules: readme files regenerated - auth ... [skip ci] --- Modified: src/modules/auth/README --- Diff: https://github.com/kamailio/kamailio/commit/4a7aa098281b608177c5da61e7a4706… Patch: https://github.com/kamailio/kamailio/commit/4a7aa098281b608177c5da61e7a4706… --- diff --git a/src/modules/auth/README b/src/modules/auth/README index 5d759fe2438..826c0b04dcc 100644 --- a/src/modules/auth/README +++ b/src/modules/auth/README @@ -57,6 +57,7 @@ Daniel-Constantin Mierla 4.7. pv_proxy_authenticate(realm, passwd, flags) 4.8. pv_auth_check(realm, passwd, flags, checks) 4.9. auth_get_www_authenticate(realm, flags, pvdest) + 4.10. auth_algorithm(algorithm) List of Examples @@ -86,6 +87,7 @@ Daniel-Constantin Mierla 1.24. pv_proxy_authenticate usage 1.25. pv_auth_check usage 1.26. auth_get_www_authenticate + 1.27. auth_algorithm example Chapter 1. Admin Guide @@ -126,6 +128,7 @@ Chapter 1. Admin Guide 4.7. pv_proxy_authenticate(realm, passwd, flags) 4.8. pv_auth_check(realm, passwd, flags, checks) 4.9. auth_get_www_authenticate(realm, flags, pvdest) + 4.10. auth_algorithm(algorithm) 1. Overview @@ -686,6 +689,7 @@ modparam("auth", "add_authinfo_hdr", yes) 4.7. pv_proxy_authenticate(realm, passwd, flags) 4.8. pv_auth_check(realm, passwd, flags, checks) 4.9. auth_get_www_authenticate(realm, flags, pvdest) + 4.10. auth_algorithm(algorithm) 4.1. consume_credentials() @@ -926,3 +930,14 @@ if (auth_get_www_authenticate("$fd", "0", "$var(wauth)")) { xlog("www authenticate header is [$var(wauth)]\n"); } ... + +4.10. auth_algorithm(algorithm) + + Set hash algorithm used for digest authentication thus overriding + algorithm parameter. Possible values are the same as those of algorithm + parameter. The parameter may be a pseudo variable. + + Example 1.27. auth_algorithm example +... +auth_algorithm("$alg"); +...

4 months, 1 week

← Newer
1
...
6
7
8
9
10
11
12
...
17
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev May 2024