[OpenSIPS-Users] Fwd: opensips 1.11.5 error opening new ssl connections with postgres

Iñigo Belamendia ibelamendia at enigmedia.es
Mon Sep 21 14:23:17 CEST 2015


Sorry by resending messages, but they still reach empty or with few
lines....


Hi,

I sent this mail last week but for some reason I see it reached as an
empty message.... so I will add some new information here.

Last monday (Sep 14) our OpenSIPS (1.11.5) went done after a restart.
The process starts but after few seconds (10") it goes down. That day we
did an apt-get update & apt-get upgrade and libpq5 package was upgraded.
A downgrade to previous version fixes the issue. All other apps against
Postgres in our organization work correctly. We have open a bug report
in Debian's bur reporting system [1].

In log we can see some access to database (Postgres), but after some
queries it refuses new queries execution. An error message appears in
log saying there's no authorization line in pg_hba.conf:

Sep 15 12:03:27 server01 opensips[17471]:
ERROR:db_postgres:db_postgres_new_connection: SSL error: called a
function you should not call#012FATAL:  no hay una l?nea en
pg_hba.conf para <<192.168.1.119>>, usuario <<username>>, base de
datos <<opensips>>, SSL inactivo#012

And it's true, theres no SSL-inactive auth line, but it is for SSL
(ip, username and password have been double checked). In attached log
file completed queries can be seen.

This issue happened in two different environments after a system
update (apt-get update && apt-get upgrade) and a service restart
(service opensips restart). Before each upgrade a disk snapshot is
taken but a restore from these snapshots (opensips and postgres)
doesn't fix the issue.

Queries executed [with psql] from console in OpenSIPS machine run ok.

Adding no-ssl auth into pg_hba.conf OpenSIPS starts ok.



[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799663




-------------- next part --------------
A non-text attachment was scrubbed...
Name: opensips.log.tgz
Type: application/x-compressed-tar
Size: 16213 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20150921/ca78dae7/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postgres.log.tgz
Type: application/x-compressed-tar
Size: 1112 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20150921/ca78dae7/attachment-0003.bin>
-------------- next part --------------
root at server01:~# uname -a
Linux server01 3.2.0-4-amd64 #1 SMP Debian 3.2.68-1+deb7u3 x86_64 GNU/Linux

root at server01:~# dpkg --list 'opensips*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre                                                                 Versión                                 Arquitectura                             Descripción
+++-======================================================================-========================================-========================================-=====================================================================
ii  opensips                                                               1.11.5-1                                 amd64                                    very fast and configurable SIP server
un  opensips-b2bua-module                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-berkeley-module                                               <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-carrierroute-module                                           <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-console                                                       <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-cpl-module                                                    <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-dbhttp-module                                                 <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-dialplan-module                                               <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-geoip-module                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-http-modules                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-identity-module                                               <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-jabber-module                                                 <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-json-module                                                   <ninguna>                                                                         (no hay ninguna descripción disponible)
ii  opensips-ldap-modules                                                  1.11.5-1                                 amd64                                    LDAP modules for OpenSIPS
un  opensips-lua-module                                                    <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-memcached-module                                              <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-mysql-module                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-perl-modules                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
ii  opensips-postgres-module                                               1.11.5-1                                 amd64                                    PostgreSQL database connectivity module for OpenSIPS
ii  opensips-presence-modules                                              1.11.5-1                                 amd64                                    SIMPLE presence modules for OpenSIPS
un  opensips-rabbitmq-module                                               <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-radius-modules                                                <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-redis-module                                                  <ninguna>                                                                         (no hay ninguna descripción disponible)
ii  opensips-regex-module                                                  1.11.5-1                                 amd64                                    PCRE regexp modules for OpenSIPS
un  opensips-snmpstats-module                                              <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-unixodbc-module                                               <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-xmlrpc-module                                                 <ninguna>                                                                         (no hay ninguna descripción disponible)
un  opensips-xmpp-module                                                   <ninguna>                                                                         (no hay ninguna descripción disponible)

root at server01:~# dpkg --list 'postgres*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre                                                                 Versión                                 Arquitectura                             Descripción
+++-======================================================================-========================================-========================================-===============================================================================
un  postgresql                                                             <ninguna>                                                                         (no hay ninguna descripción disponible)
un  postgresql-9.1                                                         <ninguna>                                                                         (no hay ninguna descripción disponible)
ii  postgresql-client                                                      9.1+134wheezy4                           all                                      front-end programs for PostgreSQL (supported version)
ii  postgresql-client-9.1                                                  9.1.18-0+deb7u1                          amd64                                    front-end programs for PostgreSQL 9.1
ii  postgresql-client-common                                               134wheezy4                               all                                      manager for multiple PostgreSQL client versions
un  postgresql-common                                                      <ninguna>                                                                         (no hay ninguna descripción disponible)
un  postgresql-doc-9.1                                                     <ninguna>                                                                         (no hay ninguna descripción disponible)

# dpkg --list 'libpq*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre                                         Versión                     Arquitectura                 Descripción
+++-==============================================-============================-============================-==================================================================================================
ii  libpq5                                         9.1.18-0+deb7u1              amd64                        PostgreSQL C client library


More information about the Users mailing list