[SR-Users] segfault when phone registers on TLS

[Denis]

Thank you, it worked!
I just added listen=tcp:IP:5060 so it probably needs to initialize tcp 
separately from tls )

Thanks a lot!

P.S.
now I am having another errors though while connecting to tls port but I 
believe it is certificates problems:
$ openssl s_client -connect IP:5061 -tls1 -CAfile certs/demoCA/cert.pem
...
1727:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake 
failure:s3_pkt.c:1102:SSL alert number 40
1727:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake 
failure:s3_pkt.c:539:
syslog:
/opt/kamailio/sbin/kamailio[1708]: ERROR: tls [tls_server.c:1190]: TLS 
accept:error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did 
not return a certificate
/opt/kamailio/sbin/kamailio[1708]: ERROR: <core> [tcp_read.c:1127]: 
ERROR: tcp_read_req: error reading

Thanks,
Den

On 15/11/12 13:33, Daniel-Constantin Mierla wrote:
> Copy and paste typo, overlapping port use:
>
> listen=tcp:127.0.0.1:5060
>
> Cheers,
> Daniel
>
> On 11/15/12 7:54 AM, Denis wrote:
>> Thanks for looking at that, Daniel.
>>
>> If I start all together with tls: and tcp: (both lines order) then I 
>> see this:
>>
>>  /opt/kamailio/sbin/kamailio[1008]: ERROR: <core> [tcp_main.c:2918]: 
>> ERROR: tcp_init: bind(9, 0x7f3fa8eb7d64, 16) on IP_ADDRESS:5061 : 
>> Address already in use
>>  /opt/kamailio/sbin/kamailio[1008]: ERROR: tls [tls_init.c:314]: 
>> Error while initializing TCP part of TLS socket IP_ADDRESS:5061
>>
>> If I start only tcp: I am getting:
>>  /opt/kamailio/sbin/kamailio[1035]: ERROR: tls [tls_init.c:660]: 
>> TLSs<IP_ADDRESS:5061>: No listening socket found
>>  /opt/kamailio/sbin/kamailio[1035]: ERROR: <core> [sr_module.c:939]: 
>> init_mod(): Error while initializing module tls 
>> (/opt/kamailio/lib64/kamailio/modules/tls.so)
>>
>> Thanks,
>> Den
>>
>> On 15/11/12 12:48, Daniel-Constantin Mierla wrote:
>>> Reviewing the previous email, I probably spotted the issues. You 
>>> said you added:
>>>
>>> listen=tls:IP.ADDRESS:5061
>>>
>>> that forces Kamailio to listen only on tls. But tls is on top of 
>>> tcp, so add:
>>>
>>> listen=tcp:127.0.0.1:5061
>>>
>>> It was reported couple of days ago, I had no time to look at it yet, 
>>> traveling for the moment. Should not crash in any condition, if tcp 
>>> is required and no other way for tls only, the startup process 
>>> should fail -- I will take care of it soon.
>>>
>>> Cheers,
>>> Daniel
>>>
>>> On 11/15/12 7:39 AM, Denis wrote:
>>>> Only during kamailio start:
>>>>
>>>> ...
>>>> /opt/kamailio/sbin/kamailio[752]: INFO: rtpproxy [rtpproxy.c:1413]: 
>>>> rtp proxy <udp:127.0.0.1:7722> found, support for it enabled
>>>> /opt/kamailio/sbin/kamailio[759]: INFO: ctl [io_listener.c:225]: 
>>>> io_listen_loop:  using epoll_lt io watch method (config)
>>>>
>>>> as soon as I send a request on port 5061 it crashes..
>>>> user at server:~$ telnet HOSTNAME 5061
>>>> Trying HOSTNAME...
>>>> Connected to HOSTNAME.
>>>> Escape character is '^]'.
>>>> fsf
>>>> Connection closed by foreign host.
>>>>
>>>> and it crashes.
>>>>
>>>> On 15/11/12 12:22, Daniel-Constantin Mierla wrote:
>>>>> Hello,
>>>>>
>>>>> On 11/15/12 4:52 AM, Denis wrote:
>>>>>> [...]
>>>>>> /opt/kamailio/sbin/kamailio[30278]: ALERT: <core> [main.c:785]: 
>>>>>> child process 30293 exited by a signal 11
>>>>> Before this line, do you have any other error messages printed by 
>>>>> pid 30278?
>>>>>
>>>>> Cheers,
>>>>> Daniel
>>>>> -- 
>>>>> Daniel-Constantin Mierla -http://www.asipto.com
>>>>> http://twitter.com/#!/miconda  -http://www.linkedin.com/in/miconda
>>>>
>>>
>>> -- 
>>> Daniel-Constantin Mierla -http://www.asipto.com
>>> http://twitter.com/#!/miconda  -http://www.linkedin.com/in/miconda
>>
>
> -- 
> Daniel-Constantin Mierla -http://www.asipto.com
> http://twitter.com/#!/miconda  -http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20121115/7426360d/attachment-0001.htm>