[OpenSIPS-Users] openssl

[Răzvan Crainea]

Just realised you are already using 1.1.0, so it is not yet fixed.
Can you go to 1.0.1e, most likely that would work.

Best regards,
Răzvan

On 03/12/2018 02:19 PM, Răzvan Crainea wrote:
> Hi, Volga!
> 
> Please read this ticket[1] to find ou more information about the issue. 
> It's basically a bug in OpenSSL that is using by default the same SSL 
> context for different purposes, which creates incompatibilities.
> 
> This is probably sorted out in the latest 1.1.x version, but I didn't 
> check yet.
> 
> Best regards,
> Răzvan
> 
> On 03/10/2018 11:56 PM, volga629 at networklab.ca wrote:
>> Hello Everyone,
>> I am looking explanation about openssl requirements. Right now TLS 
>> transport and tls mgm modules are failing to start with message
>>
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: INFO:tls_mgm:mod_init: 
>> initializing TLS protocol
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: 
>> ERROR:tls_mgm:mod_init: unable to set the memory allocation functions
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: 
>> ERROR:tls_mgm:mod_init: NOTE: check if you are using openssl 
>> 1.0.1e-fips, (or other FIPS version of openssl, as this is known to be 
>> broken; if so, you need to upgrade or downgrade to a different openssl 
>> version!
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: 
>> ERROR:tls_mgm:mod_init: current version: OpenSSL 1.1.0f-fips  25 May 2017
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: ERROR:core:init_mod: 
>> failed to initialize module tls_mgm
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: ERROR:core:main: error 
>> while initializing modules
>> Mar 10 22:46:30 sbc00 /usr/sbin/opensips[1245]: INFO:core:cleanup: 
>> cleanup
>>
>> Openssl installed
>>
>> [root at sbc00 ~]# rpm -qa | grep openssl
>> openssl-libs-1.1.0f-9.fc27.x86_64
>> openssl-1.1.0f-9.fc27.x86_64
>> compat-openssl10-1.0.2m-1.fc27.x86_64
>> [root at sbc00 ~]#
>>
>> What version of openssl should work ?
>>
>>
>> volga629
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> 

-- 
Răzvan Crainea
OpenSIPS Core Developer
   http://www.opensips-solutions.com
OpenSIPS Summit 2018
   http://www.opensips.org/events/Summit-2018Amsterdam