<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Saurabh,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">You had originally mentioned you were using openssl 1.1.1, and my workaround was concerning that. I see now that you are trying to use openssl 3. I will defer to the OpenSIPS team on this, but as it is 2 major versions newer I would expect
that openssl version would need explicit support from OpenSIPS, as many of the interfaces and APIs are likely very different from openssl 1, which is what OpenSIPS currently supports. I would not expect it to just work out of the box.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Since OpenSIPS has started moving to a different crypto library, I’m not sure whether openssl 3 support is planned.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">Ben Newlin </span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Users <users-bounces@lists.opensips.org> on behalf of Saurabh Chopra <saurabhc@3clogic.com><br>
<b>Date: </b>Monday, January 17, 2022 at 8:58 AM<br>
<b>To: </b>OpenSIPS users mailling list <users@lists.opensips.org><br>
<b>Subject: </b>Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1<o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal">Hi All,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Workaround given by Ben has done some part. Opensips 3.2.3 is compiled with latest openssl version 3.0.1 but still I am not able to run my configuration file. Errors coming like below:-<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Arial Narrow",sans-serif">Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:sr_load_module: could not open module </usr/local/lib64/opensips/modules/tls_openssl.so>: /usr/local/lib64/opensips/modules/tls_openssl.so:
undefined symbol: OPENSSL_sk_num<br>
Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:load_module: failed to load module<br>
Jan 17 13:30:05 ip-192-168-0-56 opensips: Traceback (last included file at the bottom):<br>
Jan 17 13:30:05 ip-192-168-0-56 opensips: 0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg<br>
Jan 17 13:30:05 ip-192-168-0-56 opensips: CRITICAL:core:yyerror: parse error in /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:74:13-14: failed to load module tls_openssl.so</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Could you please help us resolve this?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal">Best Regards<o:p></o:p></p>
<div>
<p class="MsoNormal">Saurabh Chopra<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">+918861979979<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Sat, Jan 15, 2022 at 9:27 PM Ben Newlin <<a href="mailto:Ben.Newlin@genesys.com">Ben.Newlin@genesys.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Apologies, I misspoke. It is not due to any change in OpenSIPS. It is caused by the change to openssl-1.1.1. We actually encountered the issue using OpenSIPS 2.4, which still uses
the shared libraries<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black">Ben Newlin
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Users <<a href="mailto:users-bounces@lists.opensips.org" target="_blank">users-bounces@lists.opensips.org</a>> on behalf of Ben Newlin <<a href="mailto:Ben.Newlin@genesys.com" target="_blank">Ben.Newlin@genesys.com</a>><br>
<b>Date: </b>Saturday, January 15, 2022 at 10:54 AM<br>
<b>To: </b>OpenSIPS users mailling list <<a href="mailto:users@lists.opensips.org" target="_blank">users@lists.opensips.org</a>>, Răzvan Crainea <<a href="mailto:razvan@opensips.org" target="_blank">razvan@opensips.org</a>>,
<a href="mailto:liviu@opensips.org" target="_blank">liviu@opensips.org</a> <<a href="mailto:liviu@opensips.org" target="_blank">liviu@opensips.org</a>><br>
<b>Subject: </b>Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1</span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">We ran into this too. I assume it is due to the change from using openssl as a shared library to a statically linked one.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">We were able to resolve by setting the environment variable “LDFLAGS” to a value of “-pthread” before the make command.
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">$ LDFLAGS=-pthread make …<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">or<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">$ export LDFLAGS=-pthread<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">$ make …<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I’m not a C expert, but that could possibly be added to the standard OpenSIPS build configuration.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black">Ben Newlin
</span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Users <<a href="mailto:users-bounces@lists.opensips.org" target="_blank">users-bounces@lists.opensips.org</a>> on behalf of Saurabh Chopra <<a href="mailto:saurabhc@3clogic.com" target="_blank">saurabhc@3clogic.com</a>><br>
<b>Date: </b>Saturday, January 15, 2022 at 2:48 AM<br>
<b>To: </b>OpenSIPS users mailling list <<a href="mailto:users@lists.opensips.org" target="_blank">users@lists.opensips.org</a>>, Răzvan Crainea <<a href="mailto:razvan@opensips.org" target="_blank">razvan@opensips.org</a>>,
<a href="mailto:liviu@opensips.org" target="_blank">liviu@opensips.org</a> <<a href="mailto:liviu@opensips.org" target="_blank">liviu@opensips.org</a>><br>
<b>Subject: </b>Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi Opensips Team/ Razvan,<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks for the response, but when i tried to compile opensips version (3.2.3) with latest openssl version (3.0.1 14 Dec 2021) on Centos 7 machine, it throws me erros,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-family:"Times New Roman",serif">Linking opensips<br>
main.o: In function `pthread_mutex_init':<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:32: undefined reference to `pthread_mutexattr_setpshared'<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:38: undefined reference to `pthread_mutexattr_destroy'<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:26: undefined reference to `pthread_mutexattr_init'<br>
main.o: In function `pthread_rwlock_init':<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:64: undefined reference to `pthread_rwlockattr_setpshared'<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:70: undefined reference to `pthread_rwlockattr_destroy'<br>
/opt/opensips-codechanged-3.2/ssl_tweaks.h:58: undefined reference to `pthread_rwlockattr_init'<br>
collect2: error: ld returned 1 exit status</span></b><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-family:"Times New Roman",serif">make: *** [opensips] Error 1</span></b> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Same errors found on the GITHUB ticket <u><a href="https://github.com/OpenSIPS/opensips/issues/2088" target="_blank">https://github.com/OpenSIPS/opensips/issues/2088</a>
</u>but the machine was Debian. And the package dependencies in the answer given by
<b>Liviu</b> let us install openssl version 1.0.2, which we don't want to, because if we do, it will compile the opensips with 1.0.2 openssl version.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Kindly help us in this matter, we are stuck here. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Best Regards<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Saurabh Chopra<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">+918861979979<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Mon, Jan 3, 2022 at 2:06 PM Răzvan Crainea <<a href="mailto:razvan@opensips.org" target="_blank">razvan@opensips.org</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi, Sasmita!<br>
<br>
You probably compiled opensips 3.2 with a previous openssl version, then <br>
replaced it with the new one.<br>
You need to re-compile tls_openssl with the new version to get this fixed.<br>
<br>
Best regards,<br>
<br>
Răzvan Crainea<br>
OpenSIPS Core Developer<br>
<a href="http://www.opensips-solutions.com" target="_blank">http://www.opensips-solutions.com</a><br>
<br>
On 12/21/21 12:30, Sasmita Panda wrote:<br>
> Hi All ,<br>
> <br>
> I have taken opensips 3.2 latest code and configure with tls_openssl to <br>
> support proto_tls proto_wss and tls_gm .<br>
> I have installed openssl-1.1.1 . (Rtpeninge latest branch is not <br>
> suported with older version of openssl , so I have taken the newer <br>
> version here )<br>
> <br>
> <br>
> Installation is successful . While running the opensips process I am <br>
> getting the below error .<br>
> *ERROR:core:sr_load_module: could not open module <br>
> </usr/local/lib64/opensips/modules/auth.so>: <br>
> /usr/local/lib64/opensips/modules/auth.so: undefined symbol: EVP_MD_CTX_free<br>
> ERROR:core:load_module: failed to load module<br>
> Traceback (last included file at the bottom):<br>
> 0. /usr/local/etc/opensips/opensips_webrtc_reg.cfg<br>
> CRITICAL:core:yyerror: parse error in <br>
> /usr/local/etc/opensips/opensips_webrtc_reg.cfg:134:13-14: failed to <br>
> load module auth.so<br>
> *<br>
> <br>
> * ERROR:core:sr_load_module: could not open module <br>
> </usr/local/lib64/opensips/modules/tls_openssl.so>: <br>
> /usr/local/lib64/opensips/modules/tls_openssl.so: undefined symbol: <br>
> OPENSSL_sk_num<br>
> ERROR:core:load_module: failed to load module<br>
> Traceback (last included file at the bottom):<br>
> 0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg<br>
> CRITICAL:core:yyerror: parse error in <br>
> /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:77:13-14: failed to <br>
> load module tls_openssl.so*<br>
> <br>
> Can anyone help me how to resolve this please ?<br>
> <br>
> */Thanks & Regards/*<br>
> /Sasmita Panda/<br>
> /Senior Network Testing and Software Engineer/<br>
> /3CLogic , ph:07827611765/<br>
> <br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
> <a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">
http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>