<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<tt>Hi, Tito!<br>
<br>
OpenSIPS uses some openssl features that are broken in the fips
version of openssl. Therefore you will have to change the openssl
with a version where this bug is fixed. If you can't find it in
your distribution, you might consider building it yourself.<br>
<br>
Best regards,<br>
</tt>
<pre class="moz-signature" cols="72">Răzvan Crainea
OpenSIPS Solutions
<a class="moz-txt-link-abbreviated" href="http://www.opensips-solutions.com">www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 04/25/2017 02:26 AM, Tito Cumpen
wrote:<br>
</div>
<blockquote
cite="mid:CANZPVB5d2J6SA+U1eJjVuwAO3kuNfXUNFsSmpE-Y0OLCE8NjFg@mail.gmail.com"
type="cite">
<div dir="ltr">This becomes an issue with centos 7 as there are no
supported packages of openssl 1.0.2 and the latest rabbitmqlib
requires the 1.0.1. Also I cannot find an openssl-devel package
of 1.0.2. I tried 2.4 and had the same outcome. Any ideas what
can be done here ?</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Apr 24, 2017 at 6:00 PM, Tito
Cumpen <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:tito@xsvoce.com" target="_blank">tito@xsvoce.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Group,
<div><br>
</div>
<div>I am having issues launching the latest opensips 2.3.
Although I've updated openssl and recompillled opensips </div>
<div><br>
</div>
<div><br>
</div>
<div>
<div> ERROR:tls_mgm:mod_init: NOTE: check if you are
using openssl 1.0.1e-fips, (or other FIPS version of
openssl, as this is known to be broken; if so, you
need to upgrade or downgrade to a different openssl
version!</div>
<div>Apr 24 21:48:33 cloud-server-06
/sbin/opensips[14697]: ERROR:tls_mgm:mod_init: current
version: OpenSSL 1.0.1e-fips 11 Feb 2013</div>
<div>Apr 24 21:48:33 cloud-server-06
/sbin/opensips[14697]: ERROR:core:init_mod: failed to
initialize module tls_mgm</div>
<div>Apr 24 21:48:33 cloud-server-06
/sbin/opensips[14697]: ERROR:core:main: error while
initializing modules</div>
<div>Apr 24 21:48:33 cloud-server-06
/sbin/opensips[14697]: <a class="moz-txt-link-freetext" href="INFO:core:cleanup">INFO:core:cleanup</a>: cleanup</div>
<div>Apr 24 21:48:33 cloud-server-06
/sbin/opensips[14697]: NOTICE:core:main: Exiting....</div>
<div>Apr 24 21:48:33 cloud-server-06 opensips:
<a class="moz-txt-link-freetext" href="INFO:core:daemonize">INFO:core:daemonize</a>: pre-daemon process exiting with
-1</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">openssl version
-a</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">OpenSSL 1.0.2k
26 Jan 2017</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">built on:
reproducible build, date unspecified</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">platform:
linux-x86_64</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">options:
bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int)
blowfish(idx) </span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">compiler: gcc -I.
-I.. -I../include -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64
-DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2
-DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM
-DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM
-DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
-DECP_NISTZ256_ASM</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">OPENSSLDIR:
"/usr/local/ssl"</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1"><br>
</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1"><br>
</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">is there any
reason opensips is using the older version still ?</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1"><br>
</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1"><br>
</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">Thanks,</span></p>
<p class="m_6597964115699123gmail-p1"><span
class="m_6597964115699123gmail-s1">Tito</span></p>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>