[SR-Users] tls with ubuntu 16.04

Daniel-Constantin Mierla miconda at gmail.com
Mon Jul 18 10:55:29 CEST 2016


Hello,

no time over the weekend to look at logs, but I pushed just now a patch
to try to see if the memory functions were set or something else
prevented the set of memory functions.

Can you try with the patch:

  -
https://github.com/kamailio/kamailio/commit/966513b374eef598434c5310a43eac2735adfd2e

I am at IEFT96 so I will try to do some stuff during the breaks... if
doesn't work, then it may take a bit to get more into it.

Just in case, would it be possible to get ssh access to such system?

Cheers,
Daniel


On 18/07/16 09:29, Jayesh Nambiar wrote:
> Hi Daniel,
> Any idea of why TLS would not load based on the logs pasted?
>
> - Jayesh
>
> On Fri, Jul 15, 2016 at 4:46 PM Jayesh Nambiar <jayesh1017 at gmail.com
> <mailto:jayesh1017 at gmail.com>> wrote:
>
>     Hi Daniel,
>     Here are the logs:
>     http://pastebin.com/tGRWr9JS
>
>     Thanks,
>
>     - Jayesh
>
>     On Fri, Jul 15, 2016 at 12:29 PM Daniel-Constantin Mierla
>     <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>         Yes, put them on pastebin.
>
>         Daniel
>
>
>         On 15/07/16 07:53, Jayesh Nambiar wrote:
>>         The libssl version is as follows:
>>
>>         1.0.2g-1ubuntu4.1
>>
>>         And openssl version shows this:
>>
>>         OpenSSL 1.0.2g-fips  1 Mar 2016
>>
>>         As for the logs with debug 3, kamailio scans each and every
>>         line in the config and generates a big file. You want me to
>>         send that in full. If yes, I'd put it in a pastebin and send
>>         it across.
>>
>>
>>         Thanks,
>>
>>         - Jayesh
>>
>>
>>         On Thu, Jul 14, 2016 at 8:50 PM Daniel-Constantin Mierla
>>         <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>
>>             Are these all the logs from kamailio startup? It looks
>>             like only the ones from the moment it tries to load tls
>>             module ...
>>
>>             Also, you haven't provided the version of libssl.
>>
>>             Daniel
>>
>>
>>             On 14/07/16 17:08, Jayesh Nambiar wrote:
>>>             Hi Daniel,
>>>             It indeed disables TLS if written this way. Here are the
>>>             logs when enable_tls is written on above the loadmodule
>>>             and kamailio fails to load module:
>>>
>>>             Jul 14 10:25:03 v38 kamailio: DEBUG: <core>
>>>             [sr_module.c:575]: load_module(): trying to load
>>>             </usr/local/kamailio/lib64/kamailio/modules/tls.so>
>>>
>>>             Jul 14 10:25:03 v38 kamailio: DEBUG: <core>
>>>             [mem/q_malloc.c:189]: qm_malloc_init(): qm_malloc_init:
>>>             QM_OPTIMIZE=16384, /ROUNDTO=2048
>>>
>>>             Jul 14 10:25:03 v38 kamailio: DEBUG: <core>
>>>             [mem/q_malloc.c:191]: qm_malloc_init(): qm_malloc_init:
>>>             QM_HASH_SIZE=2099, qm_block size=235152
>>>
>>>             Jul 14 10:25:03 v38 kamailio: DEBUG: <core>
>>>             [mem/q_malloc.c:193]: qm_malloc_init():
>>>             qm_malloc_init(0x7f5741381000, 67108864),
>>>             start=0x7f5741381000
>>>
>>>             Jul 14 10:25:03 v38 kamailio: DEBUG: <core>
>>>             [mem/q_malloc.c:202]: qm_malloc_init(): qm_malloc_init:
>>>             size= 67108864, init_overhead=235256
>>>
>>>             Jul 14 10:25:03 v38 kamailio: ERROR: tls
>>>             [tls_init.c:490]: tls_pre_init(): Unable to set the
>>>             memory allocation functions
>>>
>>>             Jul 14 10:25:03 v38 kamailio: ERROR: <core>
>>>             [sr_module.c:607]: load_module():
>>>             /usr/local/kamailio/lib64/kamailio/modules/tls.so:
>>>             mod_register failed
>>>
>>>             Jul 14 10:25:03 v38 kamailio: : <core> [cfg.y:3388]:
>>>             yyerror_at(): parse error in config file
>>>             /usr/local/kamailio/etc/kamailio/tlkn-edge/kamailio.cfg,
>>>             line 47, column 12-19: failed to load module
>>>
>>>             I happened to check the tls module doc where in
>>>             Quickstart the enable_tls was written after loadmodule
>>>             and modparams.
>>>
>>>
>>>             - Jayesh
>>>
>>>
>>>             On Thu, Jul 14, 2016 at 7:46 PM Daniel-Constantin Mierla
>>>             <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>>
>>>                 Hello,
>>>
>>>                 this should not be needed and actually may lead to
>>>                 disabling tls support overall as it is enabled after
>>>                 tls module is loaded.
>>>
>>>                 Are you sure this really works and enabling tls
>>>                 before is not working? Send the log messages with
>>>                 debug=3.
>>>
>>>                 Cheers,
>>>                 Daniel
>>>
>>>
>>>                 On 14/07/16 16:11, Jayesh Nambiar wrote:
>>>>                 Hi Daniel,
>>>>                 I had enable_tls=yes written before loading any
>>>>                 modules earlier and it was working good on 14.04.
>>>>                 Now I just changed the sequence on 16.04 and it
>>>>                 works as expected. Here is snippet below:
>>>>
>>>>                 loadmodule "tls.so"
>>>>
>>>>                 enable_tls=yes
>>>>
>>>>                 --- Jayesh
>>>>
>>>>
>>>>                 On Thu, Jul 14, 2016 at 3:21 PM Daniel-Constantin
>>>>                 Mierla <miconda at gmail.com
>>>>                 <mailto:miconda at gmail.com>> wrote:
>>>>
>>>>                     Hello,
>>>>
>>>>                     don't really get what you did? Can you paste
>>>>                     the relevant snippet of config?
>>>>
>>>>                     Cheers,
>>>>                     Daniel
>>>>
>>>>
>>>>                     On 14/07/16 07:40, Jayesh Nambiar wrote:
>>>>>                     Hello,
>>>>>                     Just did enable_tls after loadmodule "tls.so"
>>>>>                     and this now works. Thanks.
>>>>>
>>>>>                     - Jayesh
>>>>>
>>>>>                     On Thu, Jul 14, 2016 at 11:06 AM Jayesh
>>>>>                     Nambiar <jayesh1017 at gmail.com
>>>>>                     <mailto:jayesh1017 at gmail.com>> wrote:
>>>>>
>>>>>                         I did load the tls first but still get the
>>>>>                         same error. Here is the loadmodule sequence:
>>>>>
>>>>>                         loadmodule"tls.so"
>>>>>
>>>>>                         loadmodule"mi_fifo.so"
>>>>>
>>>>>                         loadmodule"kex.so"
>>>>>
>>>>>                         loadmodule"corex.so"
>>>>>
>>>>>                         loadmodule"tm.so"
>>>>>
>>>>>                         loadmodule"tmx.so"
>>>>>
>>>>>                         loadmodule"sl.so"
>>>>>
>>>>>                         loadmodule"rr.so"
>>>>>
>>>>>                         loadmodule"pv.so"
>>>>>
>>>>>                         loadmodule"maxfwd.so"
>>>>>
>>>>>                         loadmodule"dialog.so"
>>>>>
>>>>>                         loadmodule"textops.so"
>>>>>
>>>>>                         loadmodule"siputils.so"
>>>>>
>>>>>                         loadmodule"xlog.so"
>>>>>
>>>>>                         loadmodule"sanity.so"
>>>>>
>>>>>                         loadmodule"ctl.so"
>>>>>
>>>>>                         loadmodule"cfg_rpc.so"
>>>>>
>>>>>                         loadmodule"mi_rpc.so"
>>>>>
>>>>>                         loadmodule"nathelper.so"
>>>>>
>>>>>                         loadmodule"nat_traversal.so"
>>>>>
>>>>>                         loadmodule"xhttp.so"
>>>>>
>>>>>                         loadmodule"websocket.so"
>>>>>
>>>>>                         loadmodule"path.so"
>>>>>
>>>>>                         loadmodule"tcpops.so"
>>>>>
>>>>>                         loadmodule"rtpengine.so"
>>>>>
>>>>>                         loadmodule"debugger.so"
>>>>>
>>>>>
>>>>>                         Anything else that I can do to debug this,
>>>>>                         kindly let me know. Thanks.
>>>>>
>>>>>                         - Jayesh
>>>>>
>>>>>
>>>>>                         On Thu, Jul 14, 2016 at 2:37 AM
>>>>>                         Daniel-Constantin Mierla
>>>>>                         <miconda at gmail.com
>>>>>                         <mailto:miconda at gmail.com>> wrote:
>>>>>
>>>>>                             Hello,
>>>>>
>>>>>                             load first the tls module and then the
>>>>>                             others.
>>>>>
>>>>>                             Cheers,
>>>>>                             Daniel
>>>>>
>>>>>
>>>>>                             On 13/07/16 19:54, Jayesh Nambiar wrote:
>>>>>>                             Opensl Version:
>>>>>>
>>>>>>                             OpenSSL 1.0.2g-fips  1 Mar 2016
>>>>>>
>>>>>>
>>>>>>                             Order of loadmodules:
>>>>>>
>>>>>>                             loadmodule"mi_fifo.so"
>>>>>>
>>>>>>                             loadmodule"kex.so"
>>>>>>
>>>>>>                             loadmodule"corex.so"
>>>>>>
>>>>>>                             loadmodule"tm.so"
>>>>>>
>>>>>>                             loadmodule"tmx.so"
>>>>>>
>>>>>>                             loadmodule"sl.so"
>>>>>>
>>>>>>                             loadmodule"rr.so"
>>>>>>
>>>>>>                             loadmodule"pv.so"
>>>>>>
>>>>>>                             loadmodule"maxfwd.so"
>>>>>>
>>>>>>                             loadmodule"dialog.so"
>>>>>>
>>>>>>                             loadmodule"textops.so"
>>>>>>
>>>>>>                             loadmodule"siputils.so"
>>>>>>
>>>>>>                             loadmodule"xlog.so"
>>>>>>
>>>>>>                             loadmodule"sanity.so"
>>>>>>
>>>>>>                             loadmodule"ctl.so"
>>>>>>
>>>>>>                             loadmodule"cfg_rpc.so"
>>>>>>
>>>>>>                             loadmodule"mi_rpc.so"
>>>>>>
>>>>>>                             loadmodule"nathelper.so"
>>>>>>
>>>>>>                             loadmodule"nat_traversal.so"
>>>>>>
>>>>>>                             loadmodule"xhttp.so"
>>>>>>
>>>>>>                             loadmodule"websocket.so"
>>>>>>
>>>>>>                             loadmodule"path.so"
>>>>>>
>>>>>>                             loadmodule"tcpops.so"
>>>>>>
>>>>>>                             loadmodule"rtpengine.so"
>>>>>>
>>>>>>                             loadmodule"tls.so"
>>>>>>
>>>>>>                             loadmodule"debugger.so"
>>>>>>
>>>>>>
>>>>>>                             -- Jayesh
>>>>>>
>>>>>>
>>>>>>
>>>>>>                             On Wed, Jul 13, 2016 at 10:18 PM
>>>>>>                             Daniel-Constantin Mierla
>>>>>>                             <miconda at gmail.com
>>>>>>                             <mailto:miconda at gmail.com>> wrote:
>>>>>>
>>>>>>                                 Hello,
>>>>>>
>>>>>>                                 can you provide details about:
>>>>>>
>>>>>>                                  - order of loaded modules:
>>>>>>
>>>>>>                                 grep "loadmodule" kamailio.cfg
>>>>>>
>>>>>>                                   - the version of libssl
>>>>>>
>>>>>>                                 Cheers,
>>>>>>                                 Daniel
>>>>>>
>>>>>>
>>>>>>                                 On 13/07/16 16:48, Jayesh Nambiar
>>>>>>                                 wrote:
>>>>>>>                                 Hi,
>>>>>>>                                 Trying kamailio with Ubuntu
>>>>>>>                                 16.04 and I'm getting errors as
>>>>>>>                                 follows:
>>>>>>>
>>>>>>>                                 ERROR: tls [tls_init.c:490]:
>>>>>>>                                 tls_pre_init(): Unable to set
>>>>>>>                                 the memory allocation functions
>>>>>>>
>>>>>>>                                 The error is identical to the
>>>>>>>                                 one mentioned here:
>>>>>>>
>>>>>>>                                 https://bugs.launchpad.net/ubuntu/+source/kamailio/+bug/1591992
>>>>>>>
>>>>>>>                                 Is there a solution to this.
>>>>>>>                                 Thanks for any response.
>>>>>>>
>>>>>>>                                 - Jayesh
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>                                 _______________________________________________
>>>>>>>                                 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>>>>>>                                 sr-users at lists.sip-router.org
>>>>>>>                                 <mailto:sr-users at lists.sip-router.org>
>>>>>>>                                 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>>>
>>>>>>                                 -- 
>>>>>>                                 Daniel-Constantin Mierla
>>>>>>                                 http://www.asipto.com - http://www.kamailio.org
>>>>>>                                 http://twitter.com/#!/miconda
>>>>>>                                 <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>>>>
>>>>>>                                 _______________________________________________
>>>>>>                                 SIP Express Router (SER) and
>>>>>>                                 Kamailio (OpenSER) - sr-users
>>>>>>                                 mailing list
>>>>>>                                 sr-users at lists.sip-router.org
>>>>>>                                 <mailto:sr-users at lists.sip-router.org>
>>>>>>                                 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>>>
>>>>>
>>>>>                             -- 
>>>>>                             Daniel-Constantin Mierla
>>>>>                             http://www.asipto.com - http://www.kamailio.org
>>>>>                             http://twitter.com/#!/miconda
>>>>>                             <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>>>
>>>>
>>>>                     -- 
>>>>                     Daniel-Constantin Mierla
>>>>                     http://www.asipto.com - http://www.kamailio.org
>>>>                     http://twitter.com/#!/miconda
>>>>                     <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>>
>>>
>>>                 -- 
>>>                 Daniel-Constantin Mierla
>>>                 http://www.asipto.com - http://www.kamailio.org
>>>                 http://twitter.com/#!/miconda
>>>                 <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>>
>>
>>             -- 
>>             Daniel-Constantin Mierla
>>             http://www.asipto.com - http://www.kamailio.org
>>             http://twitter.com/#!/miconda
>>             <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>>
>
>         -- 
>         Daniel-Constantin Mierla
>         http://www.asipto.com - http://www.kamailio.org
>         http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160718/66674326/attachment.html>


More information about the sr-users mailing list