[OpenSIPS-Users] opensips 3.0.2 100% CPU after enable tls?

William Jin williamj at exetel.com.au
Thu Apr 23 22:22:44 EST 2020


I am using the debian apt repo, not from git.


--
Regards,
William Jin
________________________________
From: Bogdan-Andrei Iancu <bogdan at opensips.org>
Sent: Thursday, 23 April 2020 6:49 PM
To: OpenSIPS users mailling list <users at lists.opensips.org>; William Jin <williamj at exetel.com.au>
Subject: Re: [OpenSIPS-Users] opensips 3.0.2 100% CPU after enable tls?

Hi William,

What GIT revision of OpenSIPS do you use? (this is exposed by the "opensips -V")

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com



On 4/23/20 7:04 AM, William Jin wrote:
Hi,

Linux platform: Debian 9 (stretch)

opensips -V
version: opensips 3.0.2 (x86_64/linux)
flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll, sigio_rt, select.
main.c compiled on  with gcc 6.3.0

related config:

listen = tls:xxx.xxx.xxx.xxx:5061 anycast


####TLS
loadmodule "tls_mgm.so"
loadmodule "proto_tls.so"

modparam("tls_mgm", "server_domain", "sip1")
modparam("tls_mgm", "match_ip_address", "[sip1]xx.xx.xx.xx:5061")
modparam("tls_mgm", "match_sip_domain", "[sip1]xxx.xxx.example.com")

modparam("tls_mgm", "verify_cert", "[sip1]1")
modparam("tls_mgm", "require_cert", "[sip1]0")
modparam("tls_mgm", "tls_method", "[sip1]SSLv23")
modparam("tls_mgm", "ciphers_list", "[sip1]AES256-GCM-SHA384,AES256-SHA256,AES256-SHA,CAMELLIA256-SHA,AES128-SHA,SEED-SHA,CAMELLIA128-SHA,RC4-SHA,DES-CBC3-SHA")


modparam("tls_mgm", "certificate", "[sip1]/etc/opensips/tls/mycerts/selfsignedcert.pem")
modparam("tls_mgm", "private_key", "[sip1]/etc/opensips/tls/mycerts/unsecuredkey.pem")


opensips-cli -x trap {pid} result attached

Can someone shed some light on it? Thanks.


--
Regards,
William Jin



_______________________________________________
Users mailing list
Users at lists.opensips.org<mailto:Users at lists.opensips.org>
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20200423/b3650d05/attachment.html>


More information about the Users mailing list