[sr-dev] [kamailio/kamailio] tls: fix OpenSSL engine in child processes (#2840)

tls_init.c calls OPENSSL_init_ssl(); this initializes the global engine linked-list and this cannot be reset in the child. To avoid linked-list corruption we manually instantiate the engine object required for loading private keys instead of relying on CONF_modules_load_file(). Updates to doc/.

Re: [sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

Background: Our current code running in child: ```C ENGINE_load_builtin_engines(); OPENSSL_load_builtin_modules(); if (strncmp(tls_engine_settings.engine_config.s, "NONE", 4)) { err =

[sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

### Description When using HSM keys (via OpenSSL engine) the engine and private keys are loaded in the child processes since PKCS#11 modules rarely survive `fork()`. With OpenSSL 1.1.1 and the call to `OPENSSL_init_ssl()` in `tls_init.c` the engine linked-list is now initialized in the master

[sr-dev] Info: Tomorrow Live - Kamailio World 2021 - Online

Hello, couple of details for those that want to watch live or even participate to Kamailio World Online Conference, Sep 1-2, 2021 - the schedule is available at:   * https://www.kamailioworld.com/k09-online/ There is no registration required, participation is completely free. You can watch live

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

@arsperger pushed 1 commit. 4d71d13d02afdc51865f44669874ec95b538de7d slack: allocate zeroed memory for send_data -- You are receiving this because you are subscribed to this thread. View it on GitHub:

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

The snprintf() for getting datasz should be checked, because can fail on unexpected characters - from the manual: ``` [EILSEQ] An invalid wide character code was encountered. ``` That will make it safer when wanting to send data taken from SIP traffic (e.g., body of requests). On

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

We have too many modules who call the curl library, which can lead to issues with the TLS initialisation. This is why we created an API in the curl module. Please look into using that API instead of calling the curl library directly. -- You are receiving this because you are subscribed to

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

@henningw commented on this pull request. > + */ +static int _curl_send(const char* uri, str *post_data) +{ + int datasz; + char* send_data; + CURL *curl_handle; + CURLcode res; + // LM_DBG("sending to[%s]\n", uri); + + datasz = snprintf(NULL, 0, BODY_FMT,

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

@arsperger commented on this pull request. > + */ +static int _curl_send(const char* uri, str *post_data) +{ + int datasz; + char* send_data; + CURL *curl_handle; + CURLcode res; + // LM_DBG("sending to[%s]\n", uri); + + datasz = snprintf(NULL, 0, BODY_FMT,

Re: [sr-dev] [kamailio/kamailio] slack: new module, send message to slack channel (#2838)

@arsperger pushed 1 commit. 3438be7b095453d129babba1eb92936f2be63cd9 slack: fix param typo; strncpy, snprintf error check; removed pre-built html doc -- You are receiving this because you are subscribed to this thread. View it on GitHub:

[sr-dev] Jenkins build is still unstable: kamailiodev-nightly-binaries » i386,jessie #2006

See ___ Kamailio (SER) - Development Mailing List sr-dev@lists.kamailio.org

[sr-dev] Jenkins build is still unstable: kamailiodev-nightly-binaries » amd64,jessie #2006

See ___ Kamailio (SER) - Development Mailing List sr-dev@lists.kamailio.org