[OpenSIPS-Users] Segfault using TLS

Mark Farmer farmorg at gmail.com
Tue Oct 27 16:32:15 EST 2020


Hi everyone

I am trying to setup TLS to talk to MS Teams but I am getting a segfault
when I try to start OpenSIPS.

CRITICAL:core:sig_usr: segfault in attendant (starter) process!

The server is Ubuntu 20.04.1
OpenSIPS 3.1.0

>From the log:

INFO:tls_mgm:mod_init: initializing TLS management
DBG:core:__search_avp_map: looking for [tls_sip_dom] avp  - found -1
DBG:core:new_avp_alias: added alias tls_sip_dom with id 24
INFO:tls_mgm:mod_init: disabling compression due ZLIB problems
INFO:tls_mgm:init_tls_dom: Processing TLS domain 'dom1'
DBG:tls_mgm:init_tls_dom: no DH params file for tls domain 'dom1' defined,
using default '(null)'
NOTICE:tls_mgm:init_tls_dom: No EC curve defined
DBG:tls_mgm:init_tls_dom: cipher list null ... setting default
INFO:tls_mgm:get_ssl_ctx_verify_mode: client verification activated. Client
certificates are mandatory.
NOTICE:tls_mgm:init_tls_dom: no crl for tls, using none
DBG:core:count_module_procs: modules require 3 extra processes
CRITICAL:core:sig_usr: segfault in attendant (starter) process!
DBG:core:restore_segv_handler: restoring SIGSEGV handler...
DBG:core:restore_segv_handler: successfully restored system SIGSEGV handler
DBG:core:wait_status_code: read code 0 (0 byte)
INFO:core:daemonize: pre-daemon process exiting with -1

My TLS config:

#### TLS_MGM Module
loadmodule "tls_mgm.so"
modparam("tls_mgm", "server_domain", "dom1")
modparam("tls_mgm", "match_ip_address", "[dom1]xxx.xxx.xxx.xxx:5061")
modparam("tls_mgm", "match_sip_domain","[dom1]my.domain.com")
modparam("tls_mgm", "client_sip_domain_avp", "tls_sip_dom")
modparam("tls_mgm", "certificate",
"[dom1]/usr/local/etc/opensips/tls/mycert.pem")
modparam("tls_mgm", "private_key",
"[dom1]/usr/local/etc/opensips/tls/mykey.key")
modparam("tls_mgm", "ca_list",
"[dom1]/usr/local/etc/opensips/tls/calist.pem")
modparam("tls_mgm", "ca_dir", "[dom1]/usr/local/etc/opensips/certs/CA")
modparam("tls_mgm", "tls_method", "[dom1]TLSv23")

#### PROTO_TLS Module
loadmodule "proto_tls.so"
modparam("proto_tls", "tls_max_msg_chunks", 8)
modparam("proto_tls", "trace_on", 1)
modparam("proto_tls", "trace_destination", "sngdst")
modparam("proto_tls", "tls_handshake_timeout", 300)

Is anyone able to help with this please?

Best regards
Mark.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20201027/0df9c809/attachment.html>


More information about the Users mailing list