[OpenSIPS-Users] Segfault using TLS

[Mark Farmer]

Hi Ovidiu, thanks for your response.

I actually fixed it this morning, looking here:
https://github.com/OpenSIPS/opensips/issues/2204

Led me to an incorrect tls_method setting.

Thanks and sorry for the false alarm :)

Mark.


On Tue, 27 Oct 2020 at 16:41, Ovidiu Sas <osas at voipembedded.com> wrote:

> Hello Mark,
>
> Please follow the instructions from the opensips website:
> https://www.opensips.org/Documentation/TroubleShooting-Crash
>
> Regards,
> Ovidiu Sas
>
> On Tue, Oct 27, 2020 at 12:33 Mark Farmer <farmorg at gmail.com> wrote:
>
>> Hi everyone
>>
>> I am trying to setup TLS to talk to MS Teams but I am getting a segfault
>> when I try to start OpenSIPS.
>>
>> CRITICAL:core:sig_usr: segfault in attendant (starter) process!
>>
>> The server is Ubuntu 20.04.1
>> OpenSIPS 3.1.0
>>
>> From the log:
>>
>> INFO:tls_mgm:mod_init: initializing TLS management
>> DBG:core:__search_avp_map: looking for [tls_sip_dom] avp  - found -1
>> DBG:core:new_avp_alias: added alias tls_sip_dom with id 24
>> INFO:tls_mgm:mod_init: disabling compression due ZLIB problems
>> INFO:tls_mgm:init_tls_dom: Processing TLS domain 'dom1'
>> DBG:tls_mgm:init_tls_dom: no DH params file for tls domain 'dom1'
>> defined, using default '(null)'
>> NOTICE:tls_mgm:init_tls_dom: No EC curve defined
>> DBG:tls_mgm:init_tls_dom: cipher list null ... setting default
>> INFO:tls_mgm:get_ssl_ctx_verify_mode: client verification activated.
>> Client certificates are mandatory.
>> NOTICE:tls_mgm:init_tls_dom: no crl for tls, using none
>> DBG:core:count_module_procs: modules require 3 extra processes
>> CRITICAL:core:sig_usr: segfault in attendant (starter) process!
>> DBG:core:restore_segv_handler: restoring SIGSEGV handler...
>> DBG:core:restore_segv_handler: successfully restored system SIGSEGV
>> handler
>> DBG:core:wait_status_code: read code 0 (0 byte)
>> INFO:core:daemonize: pre-daemon process exiting with -1
>>
>> My TLS config:
>>
>> #### TLS_MGM Module
>> loadmodule "tls_mgm.so"
>> modparam("tls_mgm", "server_domain", "dom1")
>> modparam("tls_mgm", "match_ip_address", "[dom1]xxx.xxx.xxx.xxx:5061")
>> modparam("tls_mgm", "match_sip_domain","[dom1]my.domain.com")
>> modparam("tls_mgm", "client_sip_domain_avp", "tls_sip_dom")
>> modparam("tls_mgm", "certificate",
>> "[dom1]/usr/local/etc/opensips/tls/mycert.pem")
>> modparam("tls_mgm", "private_key",
>> "[dom1]/usr/local/etc/opensips/tls/mykey.key")
>> modparam("tls_mgm", "ca_list",
>> "[dom1]/usr/local/etc/opensips/tls/calist.pem")
>> modparam("tls_mgm", "ca_dir", "[dom1]/usr/local/etc/opensips/certs/CA")
>> modparam("tls_mgm", "tls_method", "[dom1]TLSv23")
>>
>> #### PROTO_TLS Module
>> loadmodule "proto_tls.so"
>> modparam("proto_tls", "tls_max_msg_chunks", 8)
>> modparam("proto_tls", "trace_on", 1)
>> modparam("proto_tls", "trace_destination", "sngdst")
>> modparam("proto_tls", "tls_handshake_timeout", 300)
>>
>> Is anyone able to help with this please?
>>
>> Best regards
>> Mark.
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
> --
> VoIP Embedded, Inc.
> http://www.voipembedded.com
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>


-- 
Mark Farmer
farmorg at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20201028/289f3853/attachment-0001.html>