[OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1

Mon Jan 17 18:59:19 UTC 2022

Saurabh,

You had originally mentioned you were using openssl 1.1.1, and my workaround was concerning that. I see now that you are trying to use openssl 3. I will defer to the OpenSIPS team on this, but as it is 2 major versions newer I would expect that openssl version would need explicit support from OpenSIPS, as many of the interfaces and APIs are likely very different from openssl 1, which is what OpenSIPS currently supports. I would not expect it to just work out of the box.

Since OpenSIPS has started moving to a different crypto library, I’m not sure whether openssl 3 support is planned.

Ben Newlin

From: Users <users-bounces at lists.opensips.org> on behalf of Saurabh Chopra <saurabhc at 3clogic.com>
Date: Monday, January 17, 2022 at 8:58 AM
To: OpenSIPS users mailling list <users at lists.opensips.org>
Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1
Hi All,

Workaround given by Ben has done some part. Opensips 3.2.3 is compiled with latest openssl version 3.0.1 but still I am not able to run my configuration file. Errors coming like below:-

Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:sr_load_module: could not open module </usr/local/lib64/opensips/modules/tls_openssl.so>: /usr/local/lib64/opensips/modules/tls_openssl.so: undefined symbol: OPENSSL_sk_num
Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:load_module: failed to load module
Jan 17 13:30:05 ip-192-168-0-56 opensips: Traceback (last included file at the bottom):
Jan 17 13:30:05 ip-192-168-0-56 opensips: 0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg
Jan 17 13:30:05 ip-192-168-0-56 opensips: CRITICAL:core:yyerror: parse error in /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:74:13-14: failed to load module tls_openssl.so

Could you please help us resolve this?

Best Regards
Saurabh Chopra
+918861979979

On Sat, Jan 15, 2022 at 9:27 PM Ben Newlin <Ben.Newlin at genesys.com<mailto:Ben.Newlin at genesys.com>> wrote:
Apologies, I misspoke. It is not due to any change in OpenSIPS. It is caused by the change to openssl-1.1.1. We actually encountered the issue using OpenSIPS 2.4, which still uses the shared libraries

Ben Newlin

From: Users <users-bounces at lists.opensips.org<mailto:users-bounces at lists.opensips.org>> on behalf of Ben Newlin <Ben.Newlin at genesys.com<mailto:Ben.Newlin at genesys.com>>
Date: Saturday, January 15, 2022 at 10:54 AM
To: OpenSIPS users mailling list <users at lists.opensips.org<mailto:users at lists.opensips.org>>, Răzvan Crainea <razvan at opensips.org<mailto:razvan at opensips.org>>, liviu at opensips.org<mailto:liviu at opensips.org> <liviu at opensips.org<mailto:liviu at opensips.org>>
Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1
We ran into this too. I assume it is due to the change from using openssl as a shared library to a statically linked one.

We were able to resolve by setting the environment variable “LDFLAGS” to a value of “-pthread” before the make command.

$ LDFLAGS=-pthread make …

or

$ export LDFLAGS=-pthread
$ make …

I’m not a C expert, but that could possibly be added to the standard OpenSIPS build configuration.

Ben Newlin

From: Users <users-bounces at lists.opensips.org<mailto:users-bounces at lists.opensips.org>> on behalf of Saurabh Chopra <saurabhc at 3clogic.com<mailto:saurabhc at 3clogic.com>>
Date: Saturday, January 15, 2022 at 2:48 AM
To: OpenSIPS users mailling list <users at lists.opensips.org<mailto:users at lists.opensips.org>>, Răzvan Crainea <razvan at opensips.org<mailto:razvan at opensips.org>>, liviu at opensips.org<mailto:liviu at opensips.org> <liviu at opensips.org<mailto:liviu at opensips.org>>
Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1
Hi Opensips Team/ Razvan,

Thanks for the response, but when i tried to compile opensips version (3.2.3) with latest openssl version (3.0.1 14 Dec 2021) on Centos 7 machine, it throws me erros,

Linking opensips
main.o: In function `pthread_mutex_init':
/opt/opensips-codechanged-3.2/ssl_tweaks.h:32: undefined reference to `pthread_mutexattr_setpshared'
/opt/opensips-codechanged-3.2/ssl_tweaks.h:38: undefined reference to `pthread_mutexattr_destroy'
/opt/opensips-codechanged-3.2/ssl_tweaks.h:26: undefined reference to `pthread_mutexattr_init'
main.o: In function `pthread_rwlock_init':
/opt/opensips-codechanged-3.2/ssl_tweaks.h:64: undefined reference to `pthread_rwlockattr_setpshared'
/opt/opensips-codechanged-3.2/ssl_tweaks.h:70: undefined reference to `pthread_rwlockattr_destroy'
/opt/opensips-codechanged-3.2/ssl_tweaks.h:58: undefined reference to `pthread_rwlockattr_init'
collect2: error: ld returned 1 exit status
make: *** [opensips] Error 1

Same errors found on the GITHUB ticket https://github.com/OpenSIPS/opensips/issues/2088<https://github.com/OpenSIPS/opensips/issues/2088> but the machine was Debian. And the package dependencies in the answer given by Liviu let us install openssl version 1.0.2, which we don't want to, because if we do, it will compile the opensips with 1.0.2 openssl version.

Kindly help us in this matter, we are stuck here.

Best Regards
Saurabh Chopra
+918861979979

On Mon, Jan 3, 2022 at 2:06 PM Răzvan Crainea <razvan at opensips.org<mailto:razvan at opensips.org>> wrote:
Hi, Sasmita!

You probably compiled opensips 3.2 with a previous openssl version, then
replaced it with the new one.
You need to re-compile tls_openssl with the new version to get this fixed.

Best regards,

Răzvan Crainea
OpenSIPS Core Developer
http://www.opensips-solutions.com<http://www.opensips-solutions.com>

On 12/21/21 12:30, Sasmita Panda wrote:
> Hi All ,
>
> I have taken opensips 3.2 latest code and configure with tls_openssl to
> support proto_tls proto_wss and tls_gm .
> I have installed openssl-1.1.1 . (Rtpeninge latest branch is not
> suported with older version of openssl , so I have taken the newer
> version here )
>
>
> Installation is successful . While running the opensips process I am
> getting the below error .
> *ERROR:core:sr_load_module: could not open module
> </usr/local/lib64/opensips/modules/auth.so>:
> /usr/local/lib64/opensips/modules/auth.so: undefined symbol: EVP_MD_CTX_free
>   ERROR:core:load_module: failed to load module
>   Traceback (last included file at the bottom):
>   0. /usr/local/etc/opensips/opensips_webrtc_reg.cfg
>   CRITICAL:core:yyerror: parse error in
> /usr/local/etc/opensips/opensips_webrtc_reg.cfg:134:13-14: failed to
> load module auth.so
> *
>
> * ERROR:core:sr_load_module: could not open module
> </usr/local/lib64/opensips/modules/tls_openssl.so>:
> /usr/local/lib64/opensips/modules/tls_openssl.so: undefined symbol:
> OPENSSL_sk_num
>   ERROR:core:load_module: failed to load module
>   Traceback (last included file at the bottom):
>   0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg
>   CRITICAL:core:yyerror: parse error in
> /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:77:13-14: failed to
> load module tls_openssl.so*
>
> Can anyone help me how to resolve this please ?
>
> */Thanks & Regards/*
> /Sasmita Panda/
> /Senior Network Testing and Software Engineer/
> /3CLogic , ph:07827611765/
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org<mailto:Users at lists.opensips.org>
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users>

_______________________________________________
Users mailing list
Users at lists.opensips.org<mailto:Users at lists.opensips.org>
http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
_______________________________________________
Users mailing list
Users at lists.opensips.org<mailto:Users at lists.opensips.org>
http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20220117/d24bfaca/attachment-0001.html>