Re: [sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

2021-09-06 Thread Daniel-Constantin Mierla
Closed #2839. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/2839#event-5259689819___ Kamailio (SER) - Development Mailing List sr-dev@l

Re: [sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

2021-09-06 Thread Daniel-Constantin Mierla
PR was merged. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/2839#issuecomment-913457261___ Kamailio (SER) - Development Mailing List s

Re: [sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

2021-08-31 Thread aalba6675
Background: Our current code running in child: ```C ENGINE_load_builtin_engines(); OPENSSL_load_builtin_modules(); if (strncmp(tls_engine_settings.engine_config.s, "NONE", 4)) { err = CONF_modules_load_file(tls_engine_settin

[sr-dev] [kamailio/kamailio] OpenSSL 1.1.1 and HSM keys incoming patches (#2839)

2021-08-31 Thread aalba6675
### Description When using HSM keys (via OpenSSL engine) the engine and private keys are loaded in the child processes since PKCS#11 modules rarely survive `fork()`. With OpenSSL 1.1.1 and the call to `OPENSSL_init_ssl()` in `tls_init.c` the engine linked-list is now initialized in the master