[Devel] [Fwd: [Serdev] CVS:commitlog: sip_router ISSUES sip_router/modules/tls tls_init.c tls_init.h tls_server.c]

[Klaus Darilion]

this might be relevant for openser too

-------- Original Message --------
Subject: [Serdev] CVS:commitlog: sip_router ISSUES 
sip_router/modules/tls tls_init.c tls_init.h tls_server.c
Date: Sat, 27 Jan 2007 00:11:23 +0100
From: Andrei Pelinescu-Onciul <andrei at iptel.org>
To: serdev at iptel.org

andrei      2007/01/27 00:11:23 CET

   SER CVS Repository

   Modified files:
     .                    ISSUES
     modules/tls          tls_init.c tls_init.h tls_server.c
   Log:
   - workarround for openssl kerberos malloc bug:
   openssl kerberos code in kssl.c uses libc malloc/free/calloc instead
   of the OPENSSL* versions (set using CRYPTO_set_mem_functions()). In ser
    ssl connections "move" between processes and so everything must be
    allocated in shared mem. If the wrong malloc function are called ser
    will eventually crash. This workarround tries to disable kerberos 
support
    each time a new SSL structure is created. For this fix to work is 
important
    to either use statically linked openssl or re-compile ser on the target
    machine (if openssl is linked dynamically then it must use the same
    compilation options as the machine on which ser is compiled).
   Bug reporterd by Atle Samuelsen <clona at cyberhouse.no>.

   Revision  Changes    Path
   1.28      +18 -1     sip_router/ISSUES
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/sip_router/ISSUES.diff?r1=1.27&r2=1.28
   1.6       +6 -1      sip_router/modules/tls/tls_init.c
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/sip_router/modules/tls/tls_init.c.diff?r1=1.5&r2=1.6
   1.4       +15 -1     sip_router/modules/tls/tls_init.h
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/sip_router/modules/tls/tls_init.h.diff?r1=1.3&r2=1.4
   1.9       +12 -1     sip_router/modules/tls/tls_server.c
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/sip_router/modules/tls/tls_server.c.diff?r1=1.8&r2=1.9
_______________________________________________
Serdev mailing list
Serdev at lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serdev

-- 
Klaus Darilion
nic.at