Hello,

first to clarify it: the fix for libssl referred as being in 5.3.0 is also in 5.2.5, with a slightly different approach (some code is directly in tls module in 5.2.5, while in 5.3 has been added to the core), but same overall result. So that should not be an issue anymore in branch 5.2 starting with 5.2.5.

Now back to the log messages, they didn't suggest that Kamailio is frozen, but that Kamailio didn't accept the tls connections because of mismatching the method or no common ciphers.

Did kamailio route the usual SIP traffic when this check was done by AWS R53?

What is the TLS method you set in tls.cfg?

Cheers,
Daniel

On 13.11.19 22:35, Andrew Chen wrote:
Btw..I saw the git repo on the bug.  I also experienced libcrypto coring and was told 5.2.5 would fix it.  However, in my case libcrypto didn't core.  Kamailio basically just stopped sending any responses back to tcp ping requests from R53 (or even telnet 5060 didn't respond).

On Wed, Nov 13, 2019 at 4:27 PM Andrew Chen <achen@fuze.com> wrote:
Hi Karsten,

These are our current settings:

root@sjoprodkama51:/var/log # grep max_connections /etc/kamailio/kamailio.cfg
tcp_max_connections=32768
tls_max_connections=32768
root@sjoprodkama51:/var/log #

which seems more than enough I would think.

On Wed, Nov 13, 2019 at 4:25 PM Andrew Chen <achen@fuze.com> wrote:
Thanks Jurijs.

We just upgraded to 5.2.5 to support openssl 1.1.1 which is required for ubuntu 18.04.  Is it possible to have back port this fix to 5.2.x release since we just released 5.2.5 through our battery of QA testing?

On Wed, Nov 13, 2019 at 4:14 PM Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Andrew,

I'm pretty sure this is bug what you are talking about:


It should be fixed in 5.3.0 I believe, or you can always downgrade openssl to 1.0 as described here:


Jurijs


On Wed, Nov 13, 2019 at 10:40 PM Andrew Chen <achen@fuze.com> wrote:
So another update.  As it turns out, this remote IP sent a slew of tls connections to the Kamailio box within the same second:

root@sjoprodkama51:/var/log # grep 104.248.215.53 falco_events.log | wc -l
114
root@sjoprodkama51:/var/log # 

this all came in at 18:28:05 which matches the time of those errors.

Should this cause Kamailio to totally freeze up?

On Wed, Nov 13, 2019 at 2:51 PM Andrew Chen <achen@fuze.com> wrote:
Hi Karsten,

Good point.  See below:

Kamailio ver: 5.2.5+bionic
Ubuntu version: 18.04.02 LTS
Kernel version: 4.15.0-1043-aws #45-Ubuntu SMP Mon Jun 24 14:07:03 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
openssl version: 1.1.1-1ubuntu2.1~18.04.4


Setup:
- R53 is our load balancer on top running health check on a pair of kams.
- First node has no issues and running the same setup + SIP traffic
- Second node as shown above was the one that went into "Unhealthy" state.

Hope this helps

On Wed, Nov 13, 2019 at 2:46 PM Karsten Horsmann <khorsmann@gmail.com> wrote:
Hi Andrew,

Would help if you could could describe your setup a bit more. 

Like the Kamailio version, the system distro and as we see many tls messages your openssl version. 

Maybe the traveling developers have any ideas then. 

Cheers 
Karsten Horsmann 

Andrew Chen <achen@fuze.com> schrieb am Mi., 13. Nov. 2019, 20:29:
Hi all,


R53 reported healthcheck failure on tcp port 5060.  Looking at the system, all the ports that kamailio listens on can't be monitored remotely.  To test this theory, I can telnet successfully to consul port.  I ran tcpdump and see no responses returned back to R53 monitoring hosts:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens5, link-type EN10MB (Ethernet), capture size 262144 bytes
19:11:49.368378 IP ec2-54-241-32-75.us-west-1.compute.amazonaws.com.10072 > sjoprodkama51.fuzemeeting.com.sip: Flags [S], seq 1252984048, win 29200, options [mss 1460,sackOK,TS val 3770272726 ecr 0,nop,wscale 7], length 0
19:11:49.558877 IP ec2-107-23-255-43.compute-1.amazonaws.com.60794 > sjoprodkama51.fuzemeeting.com.sip: Flags [S], seq 3484910496, win 29200, options [mss 1460,sackOK,TS val 1780607162 ecr 0,nop,wscale 7], length 0
19:11:50.572870 IP ec2-107-23-255-43.compute-1.amazonaws.com.60794 > sjoprodkama51.fuzemeeting.com.sip: Flags [S], seq 3484910496, win 29200, options [mss 1460,sackOK,TS val 1780608175 ecr 0,nop,wscale 7], length 0

Fixed the issue after restarting kamailio process.

Given this system is support production traffic, we have minimized the logging on it.  The events that we thought may lead to this is as follows:

  Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd960380 r: 0x7f33fd960400 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20310]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20310]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdd829e8 r: 0x7f33fdd82a68 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb70738 r: 0x7f33fdb707b8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20310]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20310]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20310]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdd829e8 r: 0x7f33fdd82a68 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaec8f0 r: 0x7f33fdaec970 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd93e6c0 r: 0x7f33fd93e740 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaec8f0 r: 0x7f33fdaec970 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd960380 r: 0x7f33fd960400 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd960380 r: 0x7f33fd960400 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaec8f0 r: 0x7f33fdaec970 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdd829e8 r: 0x7f33fdd82a68 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda69958 r: 0x7f33fda699d8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdd829e8 r: 0x7f33fdd82a68 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda69958 r: 0x7f33fda699d8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20309]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdd829e8 r: 0x7f33fdd82a68 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20311]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20312]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdbd5d78 r: 0x7f33fdbd5df8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb822d0 r: 0x7f33fdb82350 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb822d0 r: 0x7f33fdb82350 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda47c98 r: 0x7f33fda47d18 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaec8f0 r: 0x7f33fdaec970 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdacac30 r: 0x7f33fdacacb0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaec8f0 r: 0x7f33fdaec970 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20317]: BUG: tls [tls_server.c:1303]: tls_read_f(): IO error (0) Success
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20317]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdacac30 r: 0x7f33fdacacb0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdbb40b8 r: 0x7f33fdbb4138 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaa8f70 r: 0x7f33fdaa8ff0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb70738 r: 0x7f33fdb707b8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdc7f490 r: 0x7f33fdc7f510 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20317]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20317]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb70738 r: 0x7f33fdb707b8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20314]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdbb40b8 r: 0x7f33fdbb4138 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20313]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdacac30 r: 0x7f33fdacacb0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd960380 r: 0x7f33fd960400 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda01dc0 r: 0x7f33fda01e40 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd960380 r: 0x7f33fd960400 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdacac30 r: 0x7f33fdacacb0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20308]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdaa8f70 r: 0x7f33fdaa8ff0 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20307]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd93e6c0 r: 0x7f33fd93e740 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20305]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb70738 r: 0x7f33fdb707b8 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20315]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20315]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdb822d0 r: 0x7f33fdb82350 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20316]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20316]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fda25fd8 r: 0x7f33fda26058 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20306]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fdc196f8 r: 0x7f33fdc19778 (-1)
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac
Nov 13 18:28:05 sjoprodkama51 /usr/sbin/kamailio[20304]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f33fd9c27a8 r: 0x7f33fd9c2828 (-1) 


Any thoughts on what would cause this issue?

Thanks 


--
Andy Chen
Sr. Telephony Lead Engineer


*Confidentiality Notice: The information contained in this e-mail and any
attachments may be confidential. If you are not an intended recipient, you
are hereby notified that any dissemination, distribution or copying of this
e-mail is strictly prohibited. If you have received this e-mail in error,
please notify the sender and permanently delete the e-mail and any
attachments immediately. You should not retain, copy or use this e-mail or
any attachment for any purpose, nor disclose all or any part of the
contents to any other person. Thank you.*_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


--
Andy Chen
Sr. Telephony Lead Engineer
415 516 5535 (M)



--
Andy Chen
Sr. Telephony Lead Engineer
415 516 5535 (M)


*Confidentiality Notice: The information contained in this e-mail and any
attachments may be confidential. If you are not an intended recipient, you
are hereby notified that any dissemination, distribution or copying of this
e-mail is strictly prohibited. If you have received this e-mail in error,
please notify the sender and permanently delete the e-mail and any
attachments immediately. You should not retain, copy or use this e-mail or
any attachment for any purpose, nor disclose all or any part of the
contents to any other person. Thank you.*_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


--
Andy Chen
Sr. Telephony Lead Engineer
415 516 5535 (M)



--
Andy Chen
Sr. Telephony Lead Engineer
415 516 5535 (M)



--
Andy Chen
Sr. Telephony Lead Engineer
415 516 5535 (M)


*Confidentiality Notice: The information contained in this e-mail and any
attachments may be confidential. If you are not an intended recipient, you
are hereby notified that any dissemination, distribution or copying of this
e-mail is strictly prohibited. If you have received this e-mail in error,
please notify the sender and permanently delete the e-mail and any
attachments immediately. You should not retain, copy or use this e-mail or
any attachment for any purpose, nor disclose all or any part of the
contents to any other person. Thank you.* 
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio World Conference - April 27-29, 2020, in Berlin -- www.kamailioworld.com