[OpenSIPS-Users] openssl version launching 2.3

[Răzvan Crainea]

Hi, Tito!

OpenSIPS uses some openssl features that are broken in the fips version 
of openssl. Therefore you will have to change the openssl with a version 
where this bug is fixed. If you can't find it in your distribution, you 
might consider building it yourself.

Best regards,

Răzvan Crainea
OpenSIPS Solutions
www.opensips-solutions.com

On 04/25/2017 02:26 AM, Tito Cumpen wrote:
> This becomes an issue with centos 7 as there are no supported packages 
> of openssl 1.0.2 and the latest rabbitmqlib requires the 1.0.1. Also I 
> cannot find an openssl-devel package of 1.0.2.  I tried 2.4 and had 
> the same outcome. Any ideas what can be done here ?
>
> On Mon, Apr 24, 2017 at 6:00 PM, Tito Cumpen <tito at xsvoce.com 
> <mailto:tito at xsvoce.com>> wrote:
>
>     Group,
>
>     I am having issues launching the latest opensips 2.3. Although
>     I've updated openssl and recompillled opensips
>
>
>      ERROR:tls_mgm:mod_init: NOTE: check if you are using openssl
>     1.0.1e-fips, (or other FIPS version of openssl, as this is known
>     to be broken; if so, you need to upgrade or downgrade to a
>     different openssl version!
>     Apr 24 21:48:33 cloud-server-06 /sbin/opensips[14697]:
>     ERROR:tls_mgm:mod_init: current version: OpenSSL 1.0.1e-fips 11
>     Feb 2013
>     Apr 24 21:48:33 cloud-server-06 /sbin/opensips[14697]:
>     ERROR:core:init_mod: failed to initialize module tls_mgm
>     Apr 24 21:48:33 cloud-server-06 /sbin/opensips[14697]:
>     ERROR:core:main: error while initializing modules
>     Apr 24 21:48:33 cloud-server-06 /sbin/opensips[14697]:
>     INFO:core:cleanup: cleanup
>     Apr 24 21:48:33 cloud-server-06 /sbin/opensips[14697]:
>     NOTICE:core:main: Exiting....
>     Apr 24 21:48:33 cloud-server-06 opensips: INFO:core:daemonize:
>     pre-daemon process exiting with -1
>
>
>
>     openssl version -a
>
>     OpenSSL 1.0.2k 26 Jan 2017
>
>     built on: reproducible build, date unspecified
>
>     platform: linux-x86_64
>
>     options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int)
>     blowfish(idx)
>
>     compiler: gcc -I. -I.. -I../include  -DOPENSSL_THREADS
>     -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64
>     -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT
>     -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM
>     -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM
>     -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
>
>     OPENSSLDIR: "/usr/local/ssl"
>
>
>
>     is there any reason  opensips is using the older version still ?
>
>
>
>     Thanks,
>
>     Tito
>
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20170425/ec445e2f/attachment-0001.html>