[SR-Users] tls with ubuntu 16.04

Daniel-Constantin Mierla miconda at gmail.com
Fri Jul 15 08:59:17 CEST 2016


Yes, put them on pastebin.

Daniel


On 15/07/16 07:53, Jayesh Nambiar wrote:
> The libssl version is as follows:
>
> 1.0.2g-1ubuntu4.1
>
> And openssl version shows this:
>
> OpenSSL 1.0.2g-fips  1 Mar 2016
>
> As for the logs with debug 3, kamailio scans each and every line in
> the config and generates a big file. You want me to send that in full.
> If yes, I'd put it in a pastebin and send it across.
>
>
> Thanks,
>
> - Jayesh
>
>
> On Thu, Jul 14, 2016 at 8:50 PM Daniel-Constantin Mierla
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     Are these all the logs from kamailio startup? It looks like only
>     the ones from the moment it tries to load tls module ...
>
>     Also, you haven't provided the version of libssl.
>
>     Daniel
>
>
>     On 14/07/16 17:08, Jayesh Nambiar wrote:
>>     Hi Daniel,
>>     It indeed disables TLS if written this way. Here are the logs
>>     when enable_tls is written on above the loadmodule and kamailio
>>     fails to load module:
>>
>>     Jul 14 10:25:03 v38 kamailio: DEBUG: <core> [sr_module.c:575]:
>>     load_module(): trying to load
>>     </usr/local/kamailio/lib64/kamailio/modules/tls.so>
>>
>>     Jul 14 10:25:03 v38 kamailio: DEBUG: <core> [mem/q_malloc.c:189]:
>>     qm_malloc_init(): qm_malloc_init: QM_OPTIMIZE=16384, /ROUNDTO=2048
>>
>>     Jul 14 10:25:03 v38 kamailio: DEBUG: <core> [mem/q_malloc.c:191]:
>>     qm_malloc_init(): qm_malloc_init: QM_HASH_SIZE=2099, qm_block
>>     size=235152
>>
>>     Jul 14 10:25:03 v38 kamailio: DEBUG: <core> [mem/q_malloc.c:193]:
>>     qm_malloc_init(): qm_malloc_init(0x7f5741381000, 67108864),
>>     start=0x7f5741381000
>>
>>     Jul 14 10:25:03 v38 kamailio: DEBUG: <core> [mem/q_malloc.c:202]:
>>     qm_malloc_init(): qm_malloc_init: size= 67108864,
>>     init_overhead=235256
>>
>>     Jul 14 10:25:03 v38 kamailio: ERROR: tls [tls_init.c:490]:
>>     tls_pre_init(): Unable to set the memory allocation functions
>>
>>     Jul 14 10:25:03 v38 kamailio: ERROR: <core> [sr_module.c:607]:
>>     load_module(): /usr/local/kamailio/lib64/kamailio/modules/tls.so:
>>     mod_register failed
>>
>>     Jul 14 10:25:03 v38 kamailio: : <core> [cfg.y:3388]:
>>     yyerror_at(): parse error in config file
>>     /usr/local/kamailio/etc/kamailio/tlkn-edge/kamailio.cfg, line 47,
>>     column 12-19: failed to load module
>>
>>     I happened to check the tls module doc where in Quickstart the
>>     enable_tls was written after loadmodule and modparams.
>>
>>
>>     - Jayesh
>>
>>
>>     On Thu, Jul 14, 2016 at 7:46 PM Daniel-Constantin Mierla
>>     <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>
>>         Hello,
>>
>>         this should not be needed and actually may lead to disabling
>>         tls support overall as it is enabled after tls module is loaded.
>>
>>         Are you sure this really works and enabling tls before is not
>>         working? Send the log messages with debug=3.
>>
>>         Cheers,
>>         Daniel
>>
>>
>>         On 14/07/16 16:11, Jayesh Nambiar wrote:
>>>         Hi Daniel,
>>>         I had enable_tls=yes written before loading any modules
>>>         earlier and it was working good on 14.04. Now I just changed
>>>         the sequence on 16.04 and it works as expected. Here is
>>>         snippet below:
>>>
>>>         loadmodule "tls.so"
>>>
>>>         enable_tls=yes
>>>
>>>         --- Jayesh
>>>
>>>
>>>         On Thu, Jul 14, 2016 at 3:21 PM Daniel-Constantin Mierla
>>>         <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>>
>>>             Hello,
>>>
>>>             don't really get what you did? Can you paste the
>>>             relevant snippet of config?
>>>
>>>             Cheers,
>>>             Daniel
>>>
>>>
>>>             On 14/07/16 07:40, Jayesh Nambiar wrote:
>>>>             Hello,
>>>>             Just did enable_tls after loadmodule "tls.so" and this
>>>>             now works. Thanks.
>>>>
>>>>             - Jayesh
>>>>
>>>>             On Thu, Jul 14, 2016 at 11:06 AM Jayesh Nambiar
>>>>             <jayesh1017 at gmail.com <mailto:jayesh1017 at gmail.com>> wrote:
>>>>
>>>>                 I did load the tls first but still get the same
>>>>                 error. Here is the loadmodule sequence:
>>>>
>>>>                 loadmodule"tls.so"
>>>>
>>>>                 loadmodule"mi_fifo.so"
>>>>
>>>>                 loadmodule"kex.so"
>>>>
>>>>                 loadmodule"corex.so"
>>>>
>>>>                 loadmodule"tm.so"
>>>>
>>>>                 loadmodule"tmx.so"
>>>>
>>>>                 loadmodule"sl.so"
>>>>
>>>>                 loadmodule"rr.so"
>>>>
>>>>                 loadmodule"pv.so"
>>>>
>>>>                 loadmodule"maxfwd.so"
>>>>
>>>>                 loadmodule"dialog.so"
>>>>
>>>>                 loadmodule"textops.so"
>>>>
>>>>                 loadmodule"siputils.so"
>>>>
>>>>                 loadmodule"xlog.so"
>>>>
>>>>                 loadmodule"sanity.so"
>>>>
>>>>                 loadmodule"ctl.so"
>>>>
>>>>                 loadmodule"cfg_rpc.so"
>>>>
>>>>                 loadmodule"mi_rpc.so"
>>>>
>>>>                 loadmodule"nathelper.so"
>>>>
>>>>                 loadmodule"nat_traversal.so"
>>>>
>>>>                 loadmodule"xhttp.so"
>>>>
>>>>                 loadmodule"websocket.so"
>>>>
>>>>                 loadmodule"path.so"
>>>>
>>>>                 loadmodule"tcpops.so"
>>>>
>>>>                 loadmodule"rtpengine.so"
>>>>
>>>>                 loadmodule"debugger.so"
>>>>
>>>>
>>>>                 Anything else that I can do to debug this, kindly
>>>>                 let me know. Thanks.
>>>>
>>>>                 - Jayesh
>>>>
>>>>
>>>>                 On Thu, Jul 14, 2016 at 2:37 AM Daniel-Constantin
>>>>                 Mierla <miconda at gmail.com
>>>>                 <mailto:miconda at gmail.com>> wrote:
>>>>
>>>>                     Hello,
>>>>
>>>>                     load first the tls module and then the others.
>>>>
>>>>                     Cheers,
>>>>                     Daniel
>>>>
>>>>
>>>>                     On 13/07/16 19:54, Jayesh Nambiar wrote:
>>>>>                     Opensl Version:
>>>>>
>>>>>                     OpenSSL 1.0.2g-fips  1 Mar 2016
>>>>>
>>>>>
>>>>>                     Order of loadmodules:
>>>>>
>>>>>                     loadmodule"mi_fifo.so"
>>>>>
>>>>>                     loadmodule"kex.so"
>>>>>
>>>>>                     loadmodule"corex.so"
>>>>>
>>>>>                     loadmodule"tm.so"
>>>>>
>>>>>                     loadmodule"tmx.so"
>>>>>
>>>>>                     loadmodule"sl.so"
>>>>>
>>>>>                     loadmodule"rr.so"
>>>>>
>>>>>                     loadmodule"pv.so"
>>>>>
>>>>>                     loadmodule"maxfwd.so"
>>>>>
>>>>>                     loadmodule"dialog.so"
>>>>>
>>>>>                     loadmodule"textops.so"
>>>>>
>>>>>                     loadmodule"siputils.so"
>>>>>
>>>>>                     loadmodule"xlog.so"
>>>>>
>>>>>                     loadmodule"sanity.so"
>>>>>
>>>>>                     loadmodule"ctl.so"
>>>>>
>>>>>                     loadmodule"cfg_rpc.so"
>>>>>
>>>>>                     loadmodule"mi_rpc.so"
>>>>>
>>>>>                     loadmodule"nathelper.so"
>>>>>
>>>>>                     loadmodule"nat_traversal.so"
>>>>>
>>>>>                     loadmodule"xhttp.so"
>>>>>
>>>>>                     loadmodule"websocket.so"
>>>>>
>>>>>                     loadmodule"path.so"
>>>>>
>>>>>                     loadmodule"tcpops.so"
>>>>>
>>>>>                     loadmodule"rtpengine.so"
>>>>>
>>>>>                     loadmodule"tls.so"
>>>>>
>>>>>                     loadmodule"debugger.so"
>>>>>
>>>>>
>>>>>                     -- Jayesh
>>>>>
>>>>>
>>>>>
>>>>>                     On Wed, Jul 13, 2016 at 10:18 PM
>>>>>                     Daniel-Constantin Mierla <miconda at gmail.com
>>>>>                     <mailto:miconda at gmail.com>> wrote:
>>>>>
>>>>>                         Hello,
>>>>>
>>>>>                         can you provide details about:
>>>>>
>>>>>                          - order of loaded modules:
>>>>>
>>>>>                         grep "loadmodule" kamailio.cfg
>>>>>
>>>>>                           - the version of libssl
>>>>>
>>>>>                         Cheers,
>>>>>                         Daniel
>>>>>
>>>>>
>>>>>                         On 13/07/16 16:48, Jayesh Nambiar wrote:
>>>>>>                         Hi,
>>>>>>                         Trying kamailio with Ubuntu 16.04 and I'm
>>>>>>                         getting errors as follows:
>>>>>>
>>>>>>                         ERROR: tls [tls_init.c:490]:
>>>>>>                         tls_pre_init(): Unable to set the memory
>>>>>>                         allocation functions
>>>>>>
>>>>>>                         The error is identical to the one
>>>>>>                         mentioned here:
>>>>>>
>>>>>>                         https://bugs.launchpad.net/ubuntu/+source/kamailio/+bug/1591992
>>>>>>
>>>>>>                         Is there a solution to this. Thanks for
>>>>>>                         any response.
>>>>>>
>>>>>>                         - Jayesh
>>>>>>
>>>>>>
>>>>>>
>>>>>>                         _______________________________________________
>>>>>>                         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>>>>>                         sr-users at lists.sip-router.org
>>>>>>                         <mailto:sr-users at lists.sip-router.org>
>>>>>>                         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>>
>>>>>                         -- 
>>>>>                         Daniel-Constantin Mierla
>>>>>                         http://www.asipto.com - http://www.kamailio.org
>>>>>                         http://twitter.com/#!/miconda
>>>>>                         <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>>>
>>>>>                         _______________________________________________
>>>>>                         SIP Express Router (SER) and Kamailio
>>>>>                         (OpenSER) - sr-users mailing list
>>>>>                         sr-users at lists.sip-router.org
>>>>>                         <mailto:sr-users at lists.sip-router.org>
>>>>>                         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>>
>>>>
>>>>                     -- 
>>>>                     Daniel-Constantin Mierla
>>>>                     http://www.asipto.com - http://www.kamailio.org
>>>>                     http://twitter.com/#!/miconda
>>>>                     <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>>
>>>
>>>             -- 
>>>             Daniel-Constantin Mierla
>>>             http://www.asipto.com - http://www.kamailio.org
>>>             http://twitter.com/#!/miconda
>>>             <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>
>>
>>         -- 
>>         Daniel-Constantin Mierla
>>         http://www.asipto.com - http://www.kamailio.org
>>         http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>
>
>     -- 
>     Daniel-Constantin Mierla
>     http://www.asipto.com - http://www.kamailio.org
>     http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160715/e0c60abd/attachment.html>


More information about the sr-users mailing list