[SR-Users] TLS module not working

[Gnaneshwar Gatla]

Hey Daniel,

I've run into this issue again. A fresh install of Kamailio on Ubuntu with the latest release of openssl (OpenSSL 1.0.0e).
I have installed libssl and libssl-dev. I'm currently using the latest build Kamailio 3.2.2 and installing from source.

The output of pkg-config --libs libssl is.
-lssl

All of my Kamailio 3.1 servers run on a downgraded version OpenSSL 0.9.8k. I'm thinking to do the same to downgrade Openssl for my current issue.
Is this the right way to go?

Regards
Gnani

From: Daniel-Constantin Mierla [mailto:miconda at gmail.com]
Sent: Monday, January 16, 2012 12:45 AM
To: SIP Router - Kamailio (OpenSER) and SIP Express Router (SER) - Users Mailing List
Cc: Gnaneshwar Gatla
Subject: Re: [SR-Users] TLS module not working

Hello,

looks like a missing linking library. Can you send the output of:

pkg-config --libs libssl

Cheers,
Daniel

On 1/13/12 7:59 PM, Gnaneshwar Gatla wrote:
Hello,

I'm trying to upgrade my company's sip server to the latest Kamailio to 3.1.5.
My development environment contained Openssl 0.9.8K version and everything works fine here.

I have tried to install a fresh package for my release, the openssl version from the Ubuntu packages is Openssl 1.0.0e
And I get the following error.

My error looks like this:
sudo /etc/init.d/kamailio start
Not starting kamailio: invalid configuration file!
-e
 0(26880) ERROR: <core> [sr_module.c:523]: ERROR: load_module: could not open module </home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules/tls.so>: /home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules/tls.so: undefined symbol: SSLv2_client_method
0(26880) : <core> [cfg.y:3416]: parse error in config file /home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/etc/kamailio/kamailio.cfg, line 259, column 12-19: failed to load module
0(26880) WARNING: <core> [sr_module.c:578]: /home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/lib/kamailio/modules_k/perl.so: exports dlflags interface is deprecated and it will not be supported in newer versions; consider using mod_register() instead
0(26880) ERROR: <core> [modparam.c:161]: set_mod_param_regex: No module matching <tls> found
0(26880) : <core> [cfg.y:3419]: parse error in config file /home/p4dev/BLand_password-Evo-N800v_4700/sw/SipServer/main/kamailio/etc/kamailio/kamailio.cfg, line 437, column 118: Can't set module parameter
ERROR: bad config file (2 errors)

I'm not sure if this is a compatibility issue or is there some library missing that I have to install.


I saw this patch online with reference to Crypt-SSLeay at https://rt.cpan.org/Public/Bug/Display.html?id=70565

*The linker complains about missing SSLv2_method. The following patch works for me:*

--- SSLeay.xs~ 2011-08-29 07:25:46.000000000 +0200
+++ SSLeay.xs 2011-08-29 07:29:04.000000000 +0200
@@ -125,13 +125,9 @@
   if(ssl_version == 23) {
       ctx = SSL_CTX_new(SSLv23_client_method());
    }
-   else if(ssl_version == 3) {
+   else {
       ctx = SSL_CTX_new(SSLv3_client_method());
    }
-   else {
-      /* v2 is the default */
-      ctx = SSL_CTX_new(SSLv2_client_method());
-   }
    SSL_CTX_set_options(ctx,SSL_OP_ALL|0);
    SSL_CTX_set_default_verify_paths(ctx);
    SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, NULL);




_______________________________________________

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list

sr-users at lists.sip-router.org<mailto:sr-users at lists.sip-router.org>

http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users



--

Daniel-Constantin Mierla -- http://www.asipto.com

http://linkedin.com/in/miconda -- http://twitter.com/miconda
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20120404/74ec2b81/attachment.htm>