[SR-Users] Testing kxlibssl prng for tls module

Daniel-Constantin Mierla miconda at gmail.com
Tue Oct 8 16:42:05 CEST 2019


Hello Marco,

I am writing to see if you can test the kxlibssl prng that I just added
for tls module. I want to see if exposes the same issue you reported in:

  * https://github.com/kamailio/kamailio/issues/2077

If you can't test with master branch, you need to backport two commits:

  *
https://github.com/kamailio/kamailio/commit/99eafac2d92533ba93cd8244173aef0db0e76b0c

  *
https://github.com/kamailio/kamailio/commit/a52f05087a211bfecd36300907d0bff7170e08ec

Then set:

modparam("tls", "rand_engine", "kxlibssl")

The latest branch 5.2 has the code for setting custom prng backported.

The idea behind kxlibssl prng is to reuse the function of the default
libssl v1.1.x prng, but guarded by a kamailio specific mutex.

Cheers,
Daniel

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training, Oct 21-23, 2019, Berlin, Germany -- https://asipto.com/u/kat




More information about the sr-users mailing list