[sr-dev] Kamailio and LibreSSL

[Fabian Gast]

> On 12 Jun 2015, at 11:44, Olle E. Johansson <oej at edvina.net> wrote:
> 
> 
> On 12 Jun 2015, at 11:33, Fabian Gast <f.gast at ethon.com> wrote:
> 
>> 
>> Hello, 
>> 
>> is somebody currently working on compatibility to LIbreSSL?  
>> 
>> My first try working on this causes a crash if the TLS connection is terminated, other stuff appears to work. 
> 
> We are using a memory allocation function in OpenSSL that doesn't exist in LibreSSL. I guess you did
> not compile with LibreSSL libraries :-)
> 

 0(25708) INFO: tls [tls_mod.c:355]: mod_init(): With ECDH-Support!
 0(25708) INFO: tls [tls_mod.c:358]: mod_init(): With Diffie Hellman
 0(25708) INFO: tls [tls_init.c:574]: init_tls_h(): tls: _init_tls_h:  compiled  with  openssl  version "LibreSSL 2.1" (0x20000000), kerberos support: off, compression: off
 0(25708) INFO: tls [tls_init.c:582]: init_tls_h(): tls: init_tls_h: installed openssl library version "LibreSSL 2.1" (0x20000000), kerberos support: unknown,  zlib compression: unknown

There are no other ssl libraries on this box. 

> So for now we are not compatible. If someone wants to work on this and provide a patch, I think it's a good thing.

I am currently working on this. I just wanted to ask if somebody else is doing the same, so we / i / you dont’t have to do the same work twice.


My current problem is this one:   (On termination of a  TLS connection) 

14(17110) BUG: tls [tls_bio.c:125]: tls_BIO_mbuf_set(): null BIO ptr
14(17110) ERROR: tls [tls_server.c:294]: tls_set_mbufs(): failed to set mbufs 
0(12888) ALERT: <core> [main.c:784]: handle_sigs(): child process 17110 exited by a signal 10

Fabian