Haven't got around to producing this is in SIPp yet as I've been tied up with
other projects and I'm a newbie to SIPp.
The problem only occurs when children in Kamailio is set to anything above 1
which points towards a multi-threaded issue, as it only occurs on TLS not TCP
or UDP this would app
Not sure if this helps, each crash follows a slightly different path with-in
'modules/tls/tls_server.c' but always crashes in 'aes_ecb_cipher' at
'crypto/evp/e_aes.c:2699'.
Here's our most recent core dump.
(gdb) bt
#0 0x7f264161d6de in aes_ecb_cipher (ctx=0x7f25f5ad4480,
out=0x7f25f6afec
Thanks for troubleshooting further.
Can you try with pre-loaded library workaround that was pushed to git master
yesterday? Respectively:
*
https://github.com/kamailio/kamailio/tree/master/src/modules/tls/utils/openssl_mutex_shared
It looks like a side effect of not having the pthread locks
Unfortunately that didn't fix the problem, however the core dump has changed.
```
Reading symbols from /usr/local/kamailio/sbin/kamailio...done.
[New LWP 26088]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generat
Can you get the output of `bt full` in gdb for the last core dump file?
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1860#issuecomment-483983750_
I've re-tested this morning after making no changes and the problem is as
before, tls_max_connections was a red herring.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1860#issue
What was the command you used to start kamailio?
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1860#issuecomment-483987572___
Kamailio
Here's another core dump, mostly we're seeing the last line on:
aesni_ecb_encrypt () at crypto/aes/aesni-x86_64.s:624
```
#0 aesni_ecb_encrypt () at crypto/aes/aesni-x86_64.s:624
No locals.
#1 0x7f2f5b39e240 in aesni_ecb_cipher (ctx=0x7f2f0fa1d050,
out=0x7f2f0fa1cf68 "\006\017\340\205\065
Not sure when I get time to look deeper, it's Easter holidays in most of
Europe, so likely others are busy as well. What I can suggest for the moment is
to compile using libssl 1.0.x and see if works ok with it. That will confirm or
rule out if it is an issue with libssl/libcrypti 1.1.x. On some
I'm also having trouble with kamailio and OpenSSL 1.1, with segfaults in TLS.
It's not quite the same issue as described here, but I suspect might be related:
* thread #1, name = 'kamailio', stop reason = signal SIGSEGV
* frame #0: 0x0008009c954d libc.so.7`__free + 749
frame #1: 0x0
I vaguely remember seeing something recently on slack in regards to OpenSSL
- May want to check the archives on Kamailio slack channels.
On Sat, Apr 20, 2019 at 4:01 PM Nathan Whitehorn
wrote:
> I'm also having trouble with kamailio and OpenSSL 1.1, with segfaults in
> TLS. It's not quite the sa
https://kamailio.slack.com/archives/CDMGSTJ2U/p1542138287318000
On Sat, Apr 20, 2019 at 4:01 PM Nathan Whitehorn
wrote:
> I'm also having trouble with kamailio and OpenSSL 1.1, with segfaults in
> TLS. It's not quite the same issue as described here, but I suspect might
> be related:
>
>- t
Changing the Makefile for the TLS module to use OpenSSL 1.0 fixes the problem,
that at least provides us with a workaround.
Just to be sure, I've repeated the process of making the TLS module using
OpenSSL 1.1.1b and the problem returns, if I then clean and make the TLS module
using OpenSSL 1.0
> Changing the Makefile for the TLS module to use OpenSSL 1.0 fixes the
> problem, that at least provides us with a workaround.
>
> Just to be sure, I've repeated the process of making the TLS module using
> OpenSSL 1.1.1b and the problem returns, if I then clean and make the TLS
> module using
These are roughly the steps that I've followed to switch to OpenSSL 1.0.2r and
rebuild Kamailio TLS module. Hope this helps!
First of all you need to make and install OpenSSL 1.0.2r from source.
sudo apt install build-essential checkinstall zlib1g-dev -y
cd /usr/src
wge
@shaunjstokes - great description, do you would mind to add this to our wiki
page as well? This would be great!
It would be a good fit in the tutorials sections on www.kamailio.org/wiki (you
need to quickly create a free account to create a new page here).
--
You are receiving this because you
@henningw Wiki added
https://www.kamailio.org/wiki/tutorials/tls/howto-openssl-1-0
--
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1860#issuecomment-491744546__
For OpenSSL >= 1.1x there will be also a a workaround in the upcoming 5.3
release (efdc141ecb5ff72 and following commits). Close this one, as the
reporter also found another workaround.
--
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://g
Closed #1860.
--
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/1860#event-2514675533___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
ht
19 matches
Mail list logo
