[SR-Users] kamailio 3.0.3 tls problems

Andrei Pelinescu-Onciul andrei at iptel.org
Tue Sep 28 14:28:14 CEST 2010


On Sep 28, 2010 at 14:32, Rouskol Andrey <anry-dev at yandex.ru> wrote:
> Klaus,
> 
> I've installed binary distribution from kamailio.org site (3.0.3+lenny1), so, I'm not sure is it fixed in _my_ binary.
> But looking into kamailio-3.0.3 source - it was not fixed. And it also crashes the same way - before switching to binary package I've installed kamailio from sources. I'll try to recompile it with this patch applied.

Yes, it's not fixed in 3.0.3 (but you if you don't use git directly you
can get newer tarballs from http://sip-router.org/tarballs/sr/ ).
Anyway that patch is not related with that mem. allocation problem.

Could you try compiling from sources, with debugging and memory
debugging enabled?

make cfg mode=debug MEMDBG=1 include_modules="tls db_mysql"
make all
(note that if you want to make install, the default path is under
/usr/local, e.g. /usr/local/sbin/{kamailio,ser} )

Add also to your config:
memlog=1
memdbg=1

After that try again sending the REGISTERs and then please send me the
log (it will be quite big, all memory allocation attempts will be dumped
into it).


> I've also tried to install sip-router, it's tls module doesn't crash, but kamailio has more features. In sip-router's tls sources there is no more function tls_h_fix_read_conn() at all.

If by sip-router you mean sip-router 3.0, then it has exactly the same
features as kamailio 3.0 (only some defaults and minor stuff are
changed).
If you mean sip-router 3.0.99 or 3.1, then it should have more features
then kamailio 3.0 (being the newer soon to be release).
Note that in 3.1 the tls module was mostly re-written (to support async
mode) and some module parameters which had equivalents in the tcp config
options were removed. Are these your missing features?

Andrei
> 
> Regards,
> Andrey.
> 
> 28.09.10, 13:29, "Klaus Darilion" <klaus.mailinglists at pernau.at>:
> 
> > Am 28.09.2010 10:15, schrieb Rouskol Andrey:
> >  > Hello,
> >  >
> >  > I have a problem running kamailio with tls support.
> >  > I can successfully register only for the first time, all further registration fails with the following message in the log:
> >  >
> >  > Sep 28 11:53:55 siptest /usr/sbin/kamailio[16963]: ERROR: tls [tls_server.c:392]: SSL error:error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure
> >  >
> >  > The system is a default kamailio installation on a Debian 5.0.6 system.
> >  > Does somebody know what could cause the problem?
> >  
> >  Maybe it is related to this bug (verify if you have already a patched 
> >  version):
> >  
> >  
> >  
> >  Module: sip-router
> >  Branch: sr_3.0
> >  Commit: 513c21f67f88484dd12dd6adce6d6ddc7fb60c31
> >  URL: 
> >  http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=513c21f67f88484dd12dd6adce6d6ddc7fb60c31
> >  
> >  Author: Andrei Pelinescu-Onciul 
> >  Committer: Andrei Pelinescu-Onciul 
> >  Date:   Fri Aug 20 12:22:56 2010 +0200
> >  
> >  tls: fix state change while waiting for lock return
> >  
> >  tls_h_fix_read_conn() did not return the right thing if the state
> >  changed while waiting for the lock (the fall-through return was
> >  error instead of success).
> >  
> >  Reported-by: Couprie Geoffroy  geoffroy couprie atosorigin com
> >  
> >  ---
> >  
> >    modules/tls/tls_server.c |    2 +-
> >    1 files changed, 1 insertions(+), 1 deletions(-)
> >  
> >  diff --git a/modules/tls/tls_server.c b/modules/tls/tls_server.c
> >  index 6d32af6..52b62e3 100644
> >  --- a/modules/tls/tls_server.c
> >  +++ b/modules/tls/tls_server.c
> >  @@ -971,7 +971,7 @@ int tls_h_fix_read_conn(struct tcp_connection *c)
> >    	int ret;
> >    	struct tls_extra_data* tls_c;
> >    	
> >  -	ret = -1;
> >  +	ret = 1;
> >    	tls_c = 0;
> >    	if (unlikely(c->extra_data==0)){
> >    		lock_get(&c->write_lock);
> >  
> >  
> >  _______________________________________________
> >  sr-dev mailing list
> >  sr-dev at lists.sip-router.org
> >  http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
> >  
> >  
> 
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users



More information about the sr-users mailing list