[sr-dev] git:5.5:e1fb93fa: tls: docs - added note about --atexit=no cli param for newer libssl versions

[Daniel-Constantin Mierla]

Module: kamailio
Branch: 5.5
Commit: e1fb93fa9e3b79f043fd6b7379a61340ba93e071
URL: https://github.com/kamailio/kamailio/commit/e1fb93fa9e3b79f043fd6b7379a61340ba93e071

Author: Daniel-Constantin Mierla <miconda at gmail.com>
Committer: Daniel-Constantin Mierla <miconda at gmail.com>
Date: 2021-12-16T08:31:02+01:00

tls: docs - added note about --atexit=no cli param for newer libssl versions

(cherry picked from commit 8dc18cab5bc32c1d34a9113242d230b7458d4075)

---

Modified: src/modules/tls/doc/tls.xml

---

Diff:  https://github.com/kamailio/kamailio/commit/e1fb93fa9e3b79f043fd6b7379a61340ba93e071.diff
Patch: https://github.com/kamailio/kamailio/commit/e1fb93fa9e3b79f043fd6b7379a61340ba93e071.patch

---

diff --git a/src/modules/tls/doc/tls.xml b/src/modules/tls/doc/tls.xml
index b5ea415ae7..e356d5bff7 100644
--- a/src/modules/tls/doc/tls.xml
+++ b/src/modules/tls/doc/tls.xml
@@ -64,6 +64,15 @@
 			that uses libssl (OpenSSL library). A safe option is to have the tls module
 			loaded first (be in the first "loadmodule" in &kamailio;.cfg).
 		</para>
+		<para>
+			IMPORTANT: using this module compiled with newer versions of libssl
+			(e.g., v1.1+) may require &kamailio; to be started with
+			<emphasis>--atexit=no</emphasis> command line parameters to avoid
+			calling C atexit callbacks inside the process ending during
+			daemonize procedure as well as during shut down, which can lead
+			to crashes because it destroys and then accesses shared memory. For
+			example, such case has been reported for Ubuntu 20.04 or RedHat 8.
+		</para>
 	</section>
 	<section id="tls.quick_start">
 		<title>Quick Start</title>