[SR-Users] memory allocation failure while reading ca_list

[Daniel-Constantin Mierla]

Hello,

On 3/19/12 7:57 AM, Juha Heinanen wrote:
> in tls.cfg, i made ca_list to point to ca-certificates.crt file that
> comes with debian.  when i then started sip router, i got errors
>
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:447]: TLSc<default>: Unable to load CA list '/etc/ssl/certs/ca-certificates.crt'
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:0906D041:PEM routines:PEM_read_bio:malloc failure
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]: load_ca_list:error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core>  [sr_module.c:889]: init_mod_child(): Error while initializing module tls (/usr/lib/sip-proxy/modules/tls.so)
> Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core>  [main.c:1554]: ERROR: main: error in init_child(PROC_INT) -- exiting
>
> is that because there are too many (= 139) entries in
> ca-certificates.crt?  if so, how to solve the problem?  would it be a
> good idea that sip router would be default be able to handle this
> correctly?
is this with default mem size?

TLS requires lot more memory that usual UDP to deal with a fair enough 
amount of active connections. In debian, there is /etc/default/kamailio 
that is used to set -m and -M parameters for using with 
/etc/init.d/kamailio.

Cheers,
Daniel

-- 
Daniel-Constantin Mierla
Kamailio Advanced Training, April 23-26, 2012, Berlin, Germany
http://www.asipto.com/index.php/kamailio-advanced-training/