[SR-Users] Error while running TLS enabled Kamailio proxy

[Kamal Palei]

Dear All
While executing TLS enabled Kamailio proxy (3.1.5), getting below error.

* 0(15895) INFO: tls [tls_domain.c:227]: TLSs<default>: verify_depth=9
 0(15895) ERROR: tls [tls_domain.c:393]: TLSs<default>: Unable to load
certificate file './modules/tls/ser-selfsigned.pem'
 0(15895) ERROR: tls [tls_domain.c:394]: load_cert:error:02001002:system
library:fopen:No such file or directory
 0(15895) ERROR: tls [tls_domain.c:394]: load_cert:error:20074002:BIO
routines:FILE_CTRL:system lib
 0(15895) ERROR: tls [tls_domain.c:394]: load_cert:error:140DC002:SSL
routines:SSL_CTX_use_certificate_chain_file:system lib
 0(15895) ERROR: <core> [sr_module.c:832]: init_mod_child(): Error while
initializing module tls (/usr/local/lib/kamailio/modules/tls.so)
 0(15895) ERROR: <core> [main.c:1532]: ERROR: main: error in
init_child(PROC_INT) -- exiting
 0(15895) : <core> [mem/q_malloc.c:431]: BUG: qm_free: bad pointer (nil)
(out of memory block!) - aborting
 0(15893) ERROR: <core> [daemonize.c:307]: Main process exited before
writing to pipe
*

I performed below steps to compile and install.

1. I had a working Kamailio-3.1.5 code base without TLS
2. Downloaded latest openssl source code
3. Compiled and generated libssl.a  and libcrypto.a
4. Next, I recompiled kamailio proxy, compilation did not go through. I had
to modify Makefile in modules/tls module, added path for openssl/bio.h and
path for libssl.a
5. Then executed make all clean  and  make all include_modules=tls , this
time compilation succeeded
6. Next I did make install
7. Generated certificates using openssl library that comes by default with
ubuntu 10.04 lte
8. Added below entries in kamailio.cfg


#!define WITH_TLS


#!ifdef WITH_TLS
loadmodule "tls.so"
modparam("tls", "config", "/usr/local/etc/kamailio/tls.cfg")
modparam("tls", "private_key", "/etc/certs/localb2bua.com/key.pem")
modparam("tls", "certificate", "/etc/certs/localb2bua.com/cert.pem")
modparam("tls", "ca_list", "/etc/certs/demoCA/cert.pem")
enable_tls=yes
#!endif

9. Then I tried running kamailio proxy
It complained not getting tls.so and tls.cfg
Copied these files from modules/tls to /usr/local/etc/kamailio/ path

10. Then I was able to run Kamailio proxy and got the errors pasted at top
of email (* Unable to load certificate file
'./modules/tls/ser-selfsigned.pem')
*
Please guide me what should I do to avoid this error.

Thanks a lot.
-Kamal

*
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20121016/c4e1505f/attachment-0001.htm>