[SR-Users] tls: ssl bug #1491 workaround

Javier Valencia jv at voiper.es
Wed Mar 18 11:51:26 CET 2020


root at webrtc:~ $ kamcmd -s /var/run/kamailio//kamailio_ctl
kamcmd 1.5
Copyright 2006 iptelorg GmbH
This is free software with ABSOLUTELY NO WARRANTY.
For details type `warranty'.
kamcmd> stats.get_statistics all
core:bad_URIs_rcvd = 0
core:bad_msg_hdr = 0
core:drop_replies = 11
core:drop_requests = 3
core:err_replies = 0
core:err_requests = 0
core:fwd_replies = 0
core:fwd_requests = 305
core:rcv_replies = 7730
core:rcv_replies_18x = 447
core:rcv_replies_1xx = 898
core:rcv_replies_2xx = 3364
core:rcv_replies_3xx = 0
core:rcv_replies_401 = 2695
core:rcv_replies_404 = 54
core:rcv_replies_407 = 342
core:rcv_replies_480 = 109
core:rcv_replies_486 = 78
core:rcv_replies_4xx = 3427
core:rcv_replies_5xx = 35
core:rcv_replies_6xx = 6
core:rcv_requests = 7576
core:rcv_requests_ack = 798
core:rcv_requests_bye = 284
core:rcv_requests_cancel = 76
core:rcv_requests_info = 13
core:rcv_requests_invite = 802
core:rcv_requests_message = 0
core:rcv_requests_notify = 10
core:rcv_requests_options = 5
core:rcv_requests_prack = 0
core:rcv_requests_publish = 0
core:rcv_requests_refer = 10
core:rcv_requests_register = 5419
core:rcv_requests_subscribe = 0
core:rcv_requests_update = 32
core:unsupported_methods = 0
dialog:active_dialogs = 7
dialog:early_dialogs = 2
dialog:expired_dialogs = 0
dialog:failed_dialogs = 500
dialog:processed_dialogs = 769
dns:failed_dns_request = 0
mysql:driver_errors = 0
pike:blocked_ips = 0
registrar:accepted_regs = 0
registrar:default_expire = 3600
registrar:default_expires_range = 0
registrar:expires_range = 0
registrar:max_contacts = 0
registrar:max_expires = 3600
registrar:rejected_regs = 0
shmem:fragments = 399
shmem:free_size = 521012480
shmem:max_used_size = 16070464
shmem:real_used_size = 15858432
shmem:total_size = 536870912
shmem:used_size = 14234256
sl:1xx_replies = 0
sl:200_replies = 0
sl:202_replies = 0
sl:2xx_replies = 0
sl:300_replies = 0
sl:301_replies = 0
sl:302_replies = 0
sl:3xx_replies = 0
sl:400_replies = 0
sl:401_replies = 0
sl:403_replies = 0
sl:404_replies = 0
sl:407_replies = 0
sl:408_replies = 0
sl:483_replies = 0
sl:4xx_replies = 0
sl:500_replies = 9
sl:5xx_replies = 0
sl:6xx_replies = 0
sl:failures = 0
sl:received_ACKs = 3
sl:sent_err_replies = 0
sl:sent_replies = 136
sl:xxx_replies = 127
tcp:con_reset = 0
tcp:con_timeout = 11
tcp:connect_failed = 0
tcp:connect_success = 0
tcp:current_opened_connections = 74
tcp:current_write_queue_size = 0
tcp:established = 127
tcp:local_reject = 0
tcp:passive_open = 127
tcp:send_timeout = 0
tcp:sendq_full = 0
tmx:2xx_transactions = 3358
tmx:3xx_transactions = 0
tmx:4xx_transactions = 3236
tmx:5xx_transactions = 42
tmx:6xx_transactions = 2
tmx:UAC_transactions = 0
tmx:UAS_transactions = 6634
tmx:active_transactions = 2
tmx:inuse_transactions = 6
tmx:rpl_absorbed = 750
tmx:rpl_generated = 917
tmx:rpl_received = 7719
tmx:rpl_relayed = 6969
tmx:rpl_sent = 7886
usrloc:location-contacts = 0
usrloc:location-expires = 0
usrloc:location-users = 0
usrloc:registered_users = 0
websocket:ws_current_connections = 93
websocket:ws_failed_connections = 0
websocket:ws_failed_handshakes = 0
websocket:ws_local_closed_connections = 0
websocket:ws_max_concurrent_connections = 93
websocket:ws_msrp_current_connections = 0
websocket:ws_msrp_failed_connections = 0
websocket:ws_msrp_local_closed_connections = 0
websocket:ws_msrp_max_concurrent_connections = 0
websocket:ws_msrp_received_frames = 0
websocket:ws_msrp_remote_closed_connections = 0
websocket:ws_msrp_successful_handshakes = 0
websocket:ws_msrp_transmitted_frames = 0
websocket:ws_received_frames = 7716
websocket:ws_remote_closed_connections = 34
websocket:ws_sip_current_connections = 93
websocket:ws_sip_failed_connections = 0
websocket:ws_sip_local_closed_connections = 0
websocket:ws_sip_max_concurrent_connections = 93
websocket:ws_sip_received_frames = 7493
websocket:ws_sip_remote_closed_connections = 34
websocket:ws_sip_successful_handshakes = 127
websocket:ws_sip_transmitted_frames = 7797
websocket:ws_successful_handshakes = 127
websocket:ws_transmitted_frames = 7831

Cheers, Javier Valencia

Logo <http://www.voiper.es/>

	
Javier Valencia | CTO
Centro de Negocios Martín Buendía
Camino de las Cañadas, nº 1C, Portal 1, 2ºG
29649 Mijas (Málaga)

# 	951562080 (T) <tel:951562080> | 687486759 (M) <tel:687486759>
# 	www.voiper.es <http://www.voiper.es/>

------------------------------------------------------------------------

AVISO LEGAL
-----------

Este mensaje contiene información confidencial destinada para ser leída
exclusivamente por el destinatario. Queda prohibida la reproducción,
publicación, divulgación, total o parcial del mensaje así como el uso no
autorizados por el emisor. En caso de recibir el mensaje por error, se ruega
su comunicación al remitente lo antes posible. Por favor, indique
inmediatamente si usted o su empresa no aceptan comunicaciones de este tipo
por Internet.

Las opiniones, conclusiones y demás información incluida en este mensaje que
no esté relacionada con asuntos profesionales de SMART RECARGAS, S.L, se
entenderá que nunca se ha dado, ni está respaldado por el mismo.

Responsable del Tratamiento de Datos
------------------------------------
SMART RECARGAS , SL
Camino de las Cañadas, 1C PORTAL 1 2º G
29651 MIJAS COSTA (MALAGA)

El 18/3/20 a las 11:36, Daniel-Constantin Mierla escribió:
>
> I think that for that version it should be:
>
> kamcmd stats.get_statistics all
>
> Newer versions should have json-friendlier output with:
>
> kamcmd stats.fetch all
>
> Cheers,
> Daniel
>
> On 18.03.20 10:52, Javier Valencia wrote:
>>
>> version: kamailio 5.1.4 (x86_64/linux) d2d349
>> flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, 
>> USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, 
>> SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, 
>> USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, 
>> USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
>> ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, 
>> MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
>> poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
>> id: d2d349
>> compiled on 08:39:47 Aug 14 2018 with gcc 6.3.0
>>
>> Logo <http://www.voiper.es/>
>>
>> 	
>> Javier Valencia | CTO
>> Centro de Negocios Martín Buendía
>> Camino de las Cañadas, nº 1C, Portal 1, 2ºG
>> 29649 Mijas (Málaga)
>>
>> # 	951562080 (T) <tel:951562080> | 687486759 (M) <tel:687486759>
>> # 	www.voiper.es <http://www.voiper.es/>
>>
>> ------------------------------------------------------------------------
>> AVISO LEGAL
>> -----------
>>
>> Este mensaje contiene información confidencial destinada para ser leída
>> exclusivamente por el destinatario. Queda prohibida la reproducción,
>> publicación, divulgación, total o parcial del mensaje así como el uso no
>> autorizados por el emisor. En caso de recibir el mensaje por error, se ruega
>> su comunicación al remitente lo antes posible. Por favor, indique
>> inmediatamente si usted o su empresa no aceptan comunicaciones de este tipo
>> por Internet.
>>
>> Las opiniones, conclusiones y demás información incluida en este mensaje que
>> no esté relacionada con asuntos profesionales de SMART RECARGAS, S.L, se
>> entenderá que nunca se ha dado, ni está respaldado por el mismo.
>>
>> Responsable del Tratamiento de Datos
>> ------------------------------------
>> SMART RECARGAS , SL
>> Camino de las Cañadas, 1C PORTAL 1 2º G
>> 29651 MIJAS COSTA (MALAGA)
>> El 18/3/20 a las 10:49, Daniel-Constantin Mierla escribió:
>>>
>>>
>>> On 18.03.20 10:38, Javier Valencia wrote:
>>>>
>>>> it is not enabled Kamailio's FIFO.
>>>>
>>>> A few minutes ago, I restart kamailio to increase memory limits. 
>>>> But usually there are around 280 users.
>>>>
>>>> But;
>>>>
>>>> kamcmd> ws.dump
>>>> {
>>>>     connections: {
>>>>         1: wss:212.81.134.66:47126 -> wss:212.81.134.66:2443 
>>>> (state: OPEN,  last used 157s ago, sub-protocol: sip)
>>>>         2: wss:212.81.134.66:47128 -> wss:212.81.134.66:2443 
>>>> (state: OPEN,  last used 159s ago, sub-protocol: sip)
>>>> *... omit verbose ...*
>>>>         69: wss:212.81.134.66:47268 -> wss:212.81.134.66:2443 
>>>> (state: OPEN,  last used 64s ago, sub-protocol: sip)
>>>>         71: wss:212.81.134.66:47276 -> wss:212.81.134.66:2443 
>>>> (state: OPEN,  last used 36s ago, sub-protocol: sip)
>>>>     }
>>>>     info: {
>>>>         wscounter: 50
>>>>         truncated: yes
>>>>     }
>>>> }
>>>> kamcmd> tls.info
>>>> {
>>>>     max_connections: 2048
>>>>     opened_connections: 66
>>>>     clear_text_write_queued_bytes: 0
>>>> }
>>>>
>>>> Which it's equivalent command in kamcmd for "kamctl stats"?
>>>>
>>> What version of Kamailio do you run there?
>>>
>>> Cheers,
>>> Daniel
>>>
>>>
>>>> Kind regards, Javier Valencia.
>>>>
>>>>
>>>> Logo <http://www.voiper.es/>
>>>>
>>>> 	
>>>> Javier Valencia | CTO
>>>> Centro de Negocios Martín Buendía
>>>> Camino de las Cañadas, nº 1C, Portal 1, 2ºG
>>>> 29649 Mijas (Málaga)
>>>>
>>>> # 	951562080 (T) <tel:951562080> | 687486759 (M) <tel:687486759>
>>>> # 	www.voiper.es <http://www.voiper.es/>
>>>>
>>>> ------------------------------------------------------------------------
>>>> AVISO LEGAL
>>>> -----------
>>>>
>>>> Este mensaje contiene información confidencial destinada para ser leída
>>>> exclusivamente por el destinatario. Queda prohibida la reproducción,
>>>> publicación, divulgación, total o parcial del mensaje así como el uso no
>>>> autorizados por el emisor. En caso de recibir el mensaje por error, se ruega
>>>> su comunicación al remitente lo antes posible. Por favor, indique
>>>> inmediatamente si usted o su empresa no aceptan comunicaciones de este tipo
>>>> por Internet.
>>>>
>>>> Las opiniones, conclusiones y demás información incluida en este mensaje que
>>>> no esté relacionada con asuntos profesionales de SMART RECARGAS, S.L, se
>>>> entenderá que nunca se ha dado, ni está respaldado por el mismo.
>>>>
>>>> Responsable del Tratamiento de Datos
>>>> ------------------------------------
>>>> SMART RECARGAS , SL
>>>> Camino de las Cañadas, 1C PORTAL 1 2º G
>>>> 29651 MIJAS COSTA (MALAGA)
>>>> El 18/3/20 a las 10:24, Daniel-Constantin Mierla escribió:
>>>>>
>>>>> Hello,
>>>>>
>>>>> how many tls connections/active registrations and active calls do 
>>>>> you have at the time you get the error messages? Can you give the 
>>>>> output for:
>>>>>
>>>>> kamctl stats
>>>>>
>>>>> The first step for a fix is to increase the shared memory size via 
>>>>> -m, like -m 256 if you want to double it for now.
>>>>>
>>>>> Cheers,
>>>>> Daniel
>>>>>
>>>>> On 18.03.20 09:56, Javier Valencia wrote:
>>>>>>
>>>>>> Hi there
>>>>>>
>>>>>> I have a Kamailio with TLS/Websocket solution. I'm getting some 
>>>>>> errors on log and some users can't connect.
>>>>>>
>>>>>> My log:
>>>>>>
>>>>>> Mar 18 09:49:15 webrtc /usr/sbin/kamailio[11915]: ERROR: tls 
>>>>>> [tls_server.c:192]: tls_complete_init(): tls: ssl bug #1491 
>>>>>> workaround: not enough memory for safe operation: shm=8212904 
>>>>>> threshold1=8388608
>>>>>> Mar 18 09:49:15 webrtc /usr/sbin/kamailio[11915]: ERROR: <core> 
>>>>>> [core/tcp_read.c:1485]: tcp_read_req(): ERROR: tcp_read_req: 
>>>>>> error reading - c: 0x7f6297bd62c0 r: 0x7f6297bd6340
>>>>>>
>>>>>> Kamailio is running like:
>>>>>>
>>>>>> /usr/sbin/kamailio -P /var/run/kamailio/kamailio.pid -f 
>>>>>> /etc/kamailio/kamailio.cfg -m 128 -M 16 -u kamailio -g kamailio
>>>>>>
>>>>>> Kind regards, Javier Valencia.
>>>>>>
>>>>>>
>>>>>> -- 
>>>>>> Logo <http://www.voiper.es/>
>>>>>>
>>>>>> 	
>>>>>> Javier Valencia | CTO
>>>>>> Centro de Negocios Martín Buendía
>>>>>> Camino de las Cañadas, nº 1C, Portal 1, 2ºG
>>>>>> 29649 Mijas (Málaga)
>>>>>>
>>>>>> # 	951562080 (T) <tel:951562080> | 687486759 (M) <tel:687486759>
>>>>>> # 	www.voiper.es <http://www.voiper.es/>
>>>>>>
>>>>>> ------------------------------------------------------------------------
>>>>>> AVISO LEGAL
>>>>>> -----------
>>>>>>
>>>>>> Este mensaje contiene información confidencial destinada para ser leída
>>>>>> exclusivamente por el destinatario. Queda prohibida la reproducción,
>>>>>> publicación, divulgación, total o parcial del mensaje así como el uso no
>>>>>> autorizados por el emisor. En caso de recibir el mensaje por error, se ruega
>>>>>> su comunicación al remitente lo antes posible. Por favor, indique
>>>>>> inmediatamente si usted o su empresa no aceptan comunicaciones de este tipo
>>>>>> por Internet.
>>>>>>
>>>>>> Las opiniones, conclusiones y demás información incluida en este mensaje que
>>>>>> no esté relacionada con asuntos profesionales de SMART RECARGAS, S.L, se
>>>>>> entenderá que nunca se ha dado, ni está respaldado por el mismo.
>>>>>>
>>>>>> Responsable del Tratamiento de Datos
>>>>>> ------------------------------------
>>>>>> SMART RECARGAS , SL
>>>>>> Camino de las Cañadas, 1C PORTAL 1 2º G
>>>>>> 29651 MIJAS COSTA (MALAGA)
>>>>>>
>>>>>> _______________________________________________
>>>>>> Kamailio (SER) - Users Mailing List
>>>>>> sr-users at lists.kamailio.org
>>>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>> -- 
>>>>> Daniel-Constantin Mierla --www.asipto.com
>>>>> www.twitter.com/miconda  --www.linkedin.com/in/miconda
>>>>
>>>> _______________________________________________
>>>> Kamailio (SER) - Users Mailing List
>>>> sr-users at lists.kamailio.org
>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>> -- 
>>> Daniel-Constantin Mierla --www.asipto.com
>>> www.twitter.com/miconda  --www.linkedin.com/in/miconda
>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> sr-users at lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
> -- 
> Daniel-Constantin Mierla --www.asipto.com
> www.twitter.com/miconda  --www.linkedin.com/in/miconda
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nphijdekdobfpndn.png
Type: image/png
Size: 7800 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ekocililbmkbbkcg.png
Type: image/png
Size: 334 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0013.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pnblgnmimclfdomp.png
Type: image/png
Size: 453 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0014.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gmcbnbaigedgigck.png
Type: image/png
Size: 7800 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0015.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fgimigdbkaahjfkh.png
Type: image/png
Size: 334 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0016.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ofhbcjgdimfbgppp.png
Type: image/png
Size: 453 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0017.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dgeaglpglnodipip.png
Type: image/png
Size: 7800 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0018.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mnbknmcglooeallm.png
Type: image/png
Size: 334 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0019.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lpbjellagbgobccg.png
Type: image/png
Size: 453 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0020.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hmdmeoolcmdnacda.png
Type: image/png
Size: 7800 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0021.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: flkoodjkjhogjpbe.png
Type: image/png
Size: 334 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0022.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cemajoijablmmamn.png
Type: image/png
Size: 453 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0023.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jv.vcf
Type: text/x-vcard
Size: 306 bytes
Desc: not available
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200318/05050276/attachment-0001.vcf>


More information about the sr-users mailing list