btw, the devel branch as well as last stable releases are compiled with
memory debugger on, you can compile with F_MALLOC and try to see if you
get some improvements, but I guess they will not be really relevant over
all.
Cheers,
Daniel
On 3/19/12 4:04 PM, Jan Janak wrote:
I know this is
Daniel-Constantin Mierla writes:
Maybe we can improve a bit in the way that if there are same ca_list and
crl path, to load once and do references from the other profiles. I
don't know if there is lot of coding, but should be kept in mind for
future optimizations. Perhaps could be added in
in tls.cfg, i made ca_list to point to ca-certificates.crt file that
comes with debian. when i then started sip router, i got errors
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:447]:
TLScdefault: Unable to load CA list '/etc/ssl/certs/ca-certificates.crt'
Mar 19
Daniel-Constantin Mierla writes:
is this with default mem size?
sorry, in the test proxy om my laptop i only had 32M of shared memory.
when i increased it to 64M, the error message about insufficient memory
went away.
-- juha
___
SIP Express Router
Hello,
On 3/19/12 10:03 AM, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
is this with default mem size?
i would just like to add that once i increased shared memory from
32m to 64m, sip proxy started, but only about 10M was left as free:
afaik, the ca_list is loaded by libssl
as i mentioned, with shared memory of 64MB, sip proxy started fine.
however, it failed to send a request over tls:
Mar 19 11:21:41 test /usr/sbin/sip-proxy[30293]: INFO: Routing INVITE
sip:044234567@192.98.102.10:8001;transport=tls
Mar 19 11:21:41 test /usr/sbin/sip-proxy[30293]: WARNING: core
Daniel-Constantin Mierla writes:
Is this by one ca_list only, or do you have many tls domains, each with
own profile?
just a single ca_list and tls domain. my tls.cfg looks like this:
[client:default]
verify_certificate = yes
require_certificate = yes
tls_method = TLSv1
private_key =
On Mon, Mar 19, 2012 at 05:31, Daniel-Constantin Mierla
mico...@gmail.com wrote:
Hello,
On 3/19/12 10:03 AM, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
is this with default mem size?
i would just like to add that once i increased shared memory from
32m to 64m, sip proxy
On Mon, Mar 19, 2012 at 05:32, Juha Heinanen j...@tutpro.com wrote:
as i mentioned, with shared memory of 64MB, sip proxy started fine.
however, it failed to send a request over tls:
Mar 19 11:21:41 test /usr/sbin/sip-proxy[30293]: INFO: Routing INVITE
I know this is not a solution, but you can also try to run
dpkg-reconfigure ca-certificates
and select only a couple of CA certificates you trust. That should
make the list much smaller. Debian includes a lot of CA certificates
in its default list and I am not sure whether it is a good idea to
10 matches
Mail list logo
