[OpenSIPS-Users] Segfault using TLS

[Ovidiu Sas]

Hello Mark,

Please follow the instructions from the opensips website:
https://www.opensips.org/Documentation/TroubleShooting-Crash

Regards,
Ovidiu Sas

On Tue, Oct 27, 2020 at 12:33 Mark Farmer <farmorg at gmail.com> wrote:

> Hi everyone
>
> I am trying to setup TLS to talk to MS Teams but I am getting a segfault
> when I try to start OpenSIPS.
>
> CRITICAL:core:sig_usr: segfault in attendant (starter) process!
>
> The server is Ubuntu 20.04.1
> OpenSIPS 3.1.0
>
> From the log:
>
> INFO:tls_mgm:mod_init: initializing TLS management
> DBG:core:__search_avp_map: looking for [tls_sip_dom] avp  - found -1
> DBG:core:new_avp_alias: added alias tls_sip_dom with id 24
> INFO:tls_mgm:mod_init: disabling compression due ZLIB problems
> INFO:tls_mgm:init_tls_dom: Processing TLS domain 'dom1'
> DBG:tls_mgm:init_tls_dom: no DH params file for tls domain 'dom1' defined,
> using default '(null)'
> NOTICE:tls_mgm:init_tls_dom: No EC curve defined
> DBG:tls_mgm:init_tls_dom: cipher list null ... setting default
> INFO:tls_mgm:get_ssl_ctx_verify_mode: client verification activated.
> Client certificates are mandatory.
> NOTICE:tls_mgm:init_tls_dom: no crl for tls, using none
> DBG:core:count_module_procs: modules require 3 extra processes
> CRITICAL:core:sig_usr: segfault in attendant (starter) process!
> DBG:core:restore_segv_handler: restoring SIGSEGV handler...
> DBG:core:restore_segv_handler: successfully restored system SIGSEGV handler
> DBG:core:wait_status_code: read code 0 (0 byte)
> INFO:core:daemonize: pre-daemon process exiting with -1
>
> My TLS config:
>
> #### TLS_MGM Module
> loadmodule "tls_mgm.so"
> modparam("tls_mgm", "server_domain", "dom1")
> modparam("tls_mgm", "match_ip_address", "[dom1]xxx.xxx.xxx.xxx:5061")
> modparam("tls_mgm", "match_sip_domain","[dom1]my.domain.com")
> modparam("tls_mgm", "client_sip_domain_avp", "tls_sip_dom")
> modparam("tls_mgm", "certificate",
> "[dom1]/usr/local/etc/opensips/tls/mycert.pem")
> modparam("tls_mgm", "private_key",
> "[dom1]/usr/local/etc/opensips/tls/mykey.key")
> modparam("tls_mgm", "ca_list",
> "[dom1]/usr/local/etc/opensips/tls/calist.pem")
> modparam("tls_mgm", "ca_dir", "[dom1]/usr/local/etc/opensips/certs/CA")
> modparam("tls_mgm", "tls_method", "[dom1]TLSv23")
>
> #### PROTO_TLS Module
> loadmodule "proto_tls.so"
> modparam("proto_tls", "tls_max_msg_chunks", 8)
> modparam("proto_tls", "trace_on", 1)
> modparam("proto_tls", "trace_destination", "sngdst")
> modparam("proto_tls", "tls_handshake_timeout", 300)
>
> Is anyone able to help with this please?
>
> Best regards
> Mark.
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
-- 
VoIP Embedded, Inc.
http://www.voipembedded.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20201027/3c7ae727/attachment.html>