[sr-dev] git:5.5:ad5af6d3: tls: fix OpenSSL engine in child processes

Daniel-Constantin Mierla miconda at gmail.com
Mon Sep 6 10:35:26 CEST 2021


Module: kamailio
Branch: 5.5
Commit: ad5af6d3acd648e6bd57b923083cc26d3a3d0f57
URL: https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26d3a3d0f57

Author: Anthony Alba <ascanio.alba7 at gmail.com>
Committer: Daniel-Constantin Mierla <miconda at gmail.com>
Date: 2021-09-06T10:35:01+02:00

tls: fix OpenSSL engine in child processes

tls_init.c calls OPENSSL_init_ssl(); this initializes the
global engine linked-list and this cannot be reset in the child.

To avoid linked-list corruption we manually instantiate
the engine object required for loading private keys instead of
relying on CONF_modules_load_file().

Updates to doc/.

Addresses #2839

(cherry picked from commit 238ef139bfbe145fb93e5c4b0730de58040d2265)

---

Modified: src/modules/tls/doc/hsm_howto.xml
Modified: src/modules/tls/tls_mod.c

---

Diff:  https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26d3a3d0f57.diff
Patch: https://github.com/kamailio/kamailio/commit/ad5af6d3acd648e6bd57b923083cc26d3a3d0f57.patch




More information about the sr-dev mailing list