Re: [sr-dev] [kamailio/kamailio] failed build on CentOS 7 (#2687)

2021-03-23 Thread sergey-safarov
Closed #2687.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2687#event-4498648147___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] failed build on CentOS 7 (#2687)

2021-03-23 Thread sergey-safarov
Looks as this fixed by d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2687#issuecomment-805276054___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] [kamailio/kamailio] failed build on CentOS 7 (#2687)

2021-03-23 Thread sergey-safarov
```
CC (gcc) [M geoip.so]   geoip_mod.o 
   
LD (gcc) [M geoip.so]   geoip.so
   
CC (gcc) [M gzcompress.so]  gzcompress_mod.o
   
LD (gcc) [M gzcompress.so]  gzcompress.so   
   
CC (gcc) [M http_async_client.so]   async_http.o
   
CC (gcc) [M http_async_client.so]   http_multi.o
   
In file included from /usr/include/curl/curl.h:2251:0,  
   
 from http_multi.h:41,  
   
 from http_multi.c:35:  
   
http_multi.c: In function 'init_http_multi':
   
http_multi.c:405:51: error: 'CURLPIPE_NOTHING' undeclared (first use in this 
function) 
  curl_multi_setopt(g->multi, CURLMOPT_PIPELINING, CURLPIPE_NOTHING);   
   
   ^
   
http_multi.c:405:51: note: each undeclared identifier is reported only once for 
each function it appears in
make[2]: *** [http_multi.o] Error 1 
   
make[1]: *** [modules] Error 1  
   
make[1]: Leaving directory `/root/rpmbuild/BUILD/kamailio-5.5.0-dev4/src'   
   
make: *** [every-module] Error 2
   
error: Bad exit status from /var/tmp/rpm-tmp.vGqxsU (%build)
   
Bad exit status from /var/tmp/rpm-tmp.vGqxsU (%build)   ```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2687___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] Kamailio 5.4.4 extremely slow carrierroute preloading (#2653)

2021-03-23 Thread Henning Westerholt
@kristina258 in the initial report it was about 16 minutes for 5 entries, 
which is clearly not optimal and a non-linear increase. This has been fixed, as 
i understood.

I think the times that you are observing could be more or less expected and are 
growing linearly with the number of records. I remember from many years ago 
that i saw similar load times for that large databases with carrierroute. It 
could be also caused from changes in the core, e.g. in the memory management 
area. In the end kamailio will allocate many millions of memory chunks just to 
store this data. It will also highly depend on the performance of the database 
etc..

But its in the end of course @lbalaceanu call to make, how he sees the 
situation for the module.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2653#issuecomment-805171979___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] Kamailio 5.4.4 extremely slow carrierroute preloading (#2653)

2021-03-23 Thread kristina258
Hi @lbalaceanu, 

probably you reproduced it. You had about 500 000 records in carrierroute table 
and it tooks to load 52s. I have about 1 700 000 and it took 3min. 3 times more 
records so the loading time is 3 times higher.

When I run kamailio on debian 8 with kamailio version 4.4.7 with the same DB 
and same carrierroute records it took to load aproximetly 20s. 

I would like to kindly ask you, if it is possible for you to perform the test 
with kamailio version 4.4.7 and then check the time carrierroute needed for 
reloading.

Thank you for your patience.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2653#issuecomment-805117076___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] app_lua: Fixed error 'too many parameters' (#2686)

2021-03-23 Thread Daniel-Constantin Mierla
Merged #2686 into master.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2686#event-4497253479___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] app_lua: Fixed error 'too many parameters' (#2686)

2021-03-23 Thread Daniel-Constantin Mierla
Thanks!

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2686#issuecomment-805045031___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] [kamailio/kamailio] app_lua: Fixed error 'too many parameters' (#2686)

2021-03-23 Thread Miteshkumar Thakkar
- Calling function KSR.secsipid.secsipid_add_identity() has six parameters, is 
giving error too many parameters

!-- Kamailio Pull Request Template --

!--
IMPORTANT:
  - for detailed contributing guidelines, read:
https://github.com/kamailio/kamailio/blob/master/.github/CONTRIBUTING.md
  - pull requests must be done to master branch, unless they are backports
of fixes from master branch to a stable branch
  - backports to stable branches must be done with git cherry-pick -x 
...
  - code is contributed under BSD for core and main components (tm, sl, auth, 
tls)
  - code is contributed GPLv2 or a compatible license for the other components
  - GPL code is contributed with OpenSSL licensing exception
--

 Pre-Submission Checklist
!-- Go over all points below, and after creating the PR, tick all the 
checkboxes that apply --
!-- All points should be verified, otherwise, read the CONTRIBUTING 
guidelines from above--
!-- If youre unsure about any of these, dont hesitate to ask on 
sr-dev mailing list --
- [ ] Commit message has the format required by CONTRIBUTING guide
- [ ] Commits are split per component (core, individual modules, libs, utils, 
...)
- [ ] Each component has a single commit (if not, squash them into one commit)
- [ ] No commits to README files for modules (changes must be done to docbook 
files
in `doc/` subfolder, the README file is autogenerated)

 Type Of Change
- [ ] Small bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds new functionality)
- [ ] Breaking change (fix or feature that would change existing functionality)

 Checklist:
!-- Go over all points below, and after creating the PR, tick the 
checkboxes that apply --
- [ ] PR should be backported to stable branches
- [ ] Tested changes locally
- [ ] Related to issue # (replace  with an open issue number)

 Description
!-- Describe your changes in detail --

You can view, comment on, or merge this pull request online at:

  https://github.com/kamailio/kamailio/pull/2686

-- Commit Summary --

  * app_lua: Fixed error too many parameters

-- File Changes --

M src/modules/app_lua/app_lua_api.c (2)

-- Patch Links --

https://github.com/kamailio/kamailio/pull/2686.patch
https://github.com/kamailio/kamailio/pull/2686.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2686
___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread juha-h
Daniel-Constantin Mierla writes:

> As I said, I added the parameter based on the description of the
> feature request, but the manual suggested it might not be enough when
> acting as a tls server, see my first comment above. 
> 
> Probably works when it acts as a client (when opens the connection).

Yes, it does work as client.  I have two kamailios A - B using TLS between
them. When A uses ca_path and B uses ca_list, A can connect to B without
errors.  But when I change also B to use ca_path, I get errors on both.

On A:
Mar 23 15:32:58 lohi /usr/bin/sip-proxy[18482]: ERROR: tls [tls_server.c:1283]: 
tls_h_read_f(): protocol level error
Mar 23 15:32:58 lohi /usr/bin/sip-proxy[18482]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): TLS read:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert 
unknown ca
Mar 23 15:32:58 lohi /usr/bin/sip-proxy[18482]: ERROR: tls [tls_server.c:1287]: 
tls_h_read_f(): source IP: 192.26.134.10
Mar 23 15:32:58 lohi /usr/bin/sip-proxy[18482]: ERROR: tls [tls_server.c:1290]: 
tls_h_read_f(): destination IP: 192.168.43.160

On B:
 Mar 23 15:32:58 buster /usr/bin/sip-proxy[2266]: ERROR: tls 
[tls_server.c:1283]: tls_h_read_f(): protocol level error
Mar 23 15:32:58 buster /usr/bin/sip-proxy[2266]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): TLS accept:error:1417C086:SSL 
routines:tls_process_client_certificate:certificate verify failed
Mar 23 15:32:58 buster /usr/bin/sip-proxy[2266]: ERROR: tls 
[tls_server.c:1287]: tls_h_read_f(): source IP: 192.168.43.160
Mar 23 15:32:58 buster /usr/bin/sip-proxy[2266]: ERROR: tls 
[tls_server.c:1290]: tls_h_read_f(): destination IP: 192.26.134.10

-- Juha


-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804910135___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] DMQ memory leak with dmq_bcast_message function (#2600)

2021-03-23 Thread Daniel-Constantin Mierla
Could not spot any potential issue upon quick look at the code.

To use valgrind to track private memory issues, you have to compile Kamailio 
with system memory, like:

```
make MEMPKG=sys include_modules="..." cfg
make all
...
```

Try to see if you can get any leads with valgrind.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2600#issuecomment-804900118___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] Core dumps possibly related to #2616 or http_async_query (#2632)

2021-03-23 Thread Daniel-Constantin Mierla
Closed #2632.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2632#event-4495885186___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] Core dumps possibly related to #2616 or http_async_query (#2632)

2021-03-23 Thread Daniel-Constantin Mierla
Closing this one, commit was pushed to stable branches.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2632#issuecomment-804868440___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Daniel-Constantin Mierla
As I said, I added the parameter based on the description of the feature 
request, but the manual suggested it might not be enough when acting as a tls 
server, see my first comment above.

Probably works when it acts as a client (when opens the connection).

You can dig further in the libssl docs to see what has to be done for server 
case and you can update the load_ca_list() function from tls_domain.c.

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804865913___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:54609496: app_lua: Fixed error 'too many parameters'

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: 5460949614c92c7dbfb7f63274540500f2a69d5b
URL: 
https://github.com/kamailio/kamailio/commit/5460949614c92c7dbfb7f63274540500f2a69d5b

Author: Miteshkumar Thakkar 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T17:27:32+01:00

app_lua: Fixed error 'too many parameters'

- Calling function KSR.secsipid.secsipid_add_identity() has six parameters, is 
giving error 'too many parameters'

---

Modified: src/modules/app_lua/app_lua_api.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/5460949614c92c7dbfb7f63274540500f2a69d5b.diff
Patch: 
https://github.com/kamailio/kamailio/commit/5460949614c92c7dbfb7f63274540500f2a69d5b.patch

---

diff --git a/src/modules/app_lua/app_lua_api.c 
b/src/modules/app_lua/app_lua_api.c
index da3b4eeb17..3fa131ca3a 100644
--- a/src/modules/app_lua/app_lua_api.c
+++ b/src/modules/app_lua/app_lua_api.c
@@ -969,7 +969,7 @@ int sr_kemi_lua_exec_func_ex(lua_State* L, sr_kemi_t *ket, 
int pdelta)
return app_lua_return_false(L);
}
 
-   if(argc>=SR_KEMI_PARAMS_MAX+pdelta) {
+   if(argc>SR_KEMI_PARAMS_MAX+pdelta) {
LM_ERR("too many parameters for: %.*s.%.*s\n",
mname->len, mname->s, fname->len, fname->s);
return app_lua_return_false(L);


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Juha Heinanen
Daniel-Constantin Mierla writes:

> Pushed a commit to fix the error message.

Now kamailio starts, but when baresip sip client tries to connect over
TLS, I get these errors:

Mar 23 14:02:23 lohi /usr/bin/sip-proxy[1732]: ERROR: tls [tls_server.c:1283]: 
tls_h_read_f(): protocol level error
Mar 23 14:02:23 lohi /usr/bin/sip-proxy[1732]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): TLS accept:error:1417C086:SSL 
routines:tls_process_client_certificate:certificate verify failed
Mar 23 14:02:23 lohi /usr/bin/sip-proxy[1732]: ERROR: tls [tls_server.c:1287]: 
tls_h_read_f(): source IP: 192.168.43.253
Mar 23 14:02:23 lohi /usr/bin/sip-proxy[1732]: ERROR: tls [tls_server.c:1290]: 
tls_h_read_f(): destination IP: 192.168.43.160

If I in tls.cfg replace ca_path with ca_list, the same client connects
without errors.

-- Juha

___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Daniel-Constantin Mierla
Pushed a commit to fix the error message.

The SSL_CTX_set_client_CA_list() is used with the ca_list file, the error 
message above is actually when that is done.

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804842521___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread juha-h
Daniel-Constantin Mierla writes:

> Being Kamailio specific coding, I added the config option and set it
> value as parameter to SSL_CTX_load_verify_locations() based on the
> feature request description, but it might not be complete
> implementation because its manual specify that the folder content is
> not send to client via SSL_CTX_set_client_CA_list(): 
> 
>   * 
> https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_load_verify_locations.html

Neither is contents of CAfile sent to client:

  In server mode, when requesting a client certificate, the server must
  send the list of CAs of which it will accept client certificates. This
  list is not influenced by the contents of CAfile or CApath and must
  explicitly be set using the SSL_CTX_set_client_CA_list(3) family of
  functions.

-- Juha


-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804840617___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] Kamailio 5.4.4 extremely slow carrierroute preloading (#2653)

2021-03-23 Thread Lucian Balaceanu
Hello @kristina258 ,

Unfortunately, I can't reproduce your issue.
I have built Postgres carrierroute tables using kamctlrc/kamdbctl and am 
testing using main branch (including new commit).  

**time ./utils/kamcmd/kamcmd  cr.reload_routes
real0m52.270s**

ser=# select count(*) from carrierroute where prob != 0;
 count  

 501684

ser=# select count(*) from carrierroute where prob = 0;
 count 
---
 0
(1 row)

Are you also using the carrierroute tables structures provided by the kamdbctl 
tool?
Could you provide some logs from the start/reload process?

Thank you,
Lucian

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2653#issuecomment-804838974___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Juha Heinanen
Daniel-Constantin Mierla writes:

> I pushed a commit to make that error message print the file name. Try
> again with latest master and paste here again the new error message to
> see what's there.

Mar 23 13:41:37 lohi /usr/bin/sip-proxy[7261]: ERROR: tls [tls_domain.c:604]: 
load_ca_list(): TLSs: Error while setting client CA list file [/3]
Mar 23 13:41:37 lohi /usr/bin/sip-proxy[7261]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): load_ca_list:error:0200100E:system library:fopen:Bad address
Mar 23 13:41:37 lohi /usr/bin/sip-proxy[7261]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): load_ca_list:error:20074002:BIO routines:file_ctrl:system lib

-- Juha

___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Daniel-Constantin Mierla
I pushed a commit to make that error message print the file name. Try again 
with latest master and paste here again the new error message to see what's 
there.

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804828670___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread juha-h
Daniel-Constantin Mierla writes:

> The error message seems to be related to failure to open `ca_list`
> file, not to `ca_path` -- can you check if `ca_list` is still set
> somewhere there to an invalid file path?

I checked and config file has only this:

modparam("tls", "config", "/etc/sip-proxy/tls.cfg")

and tls.cfg contains:

# more tls.cfg
[client:default]
verify_certificate = yes
require_certificate = yes
tls_method = TLSv1.2+
private_key = /etc/sip-proxy/certs/key.pem
certificate = /etc/sip-proxy/certs/cert.pem
ca_path = /etc/sip-proxy/certs/ca_list

[server:default]
verify_certificate = yes
require_certificate = no
server_name = lohi.tutpro.com
tls_method = TLSv1.1+
private_key = /etc/sip-proxy/certs/key.pem
certificate = /etc/sip-proxy/certs/cert.pem
ca_path = /etc/sip-proxy/certs/ca_list

There is no trace of ca_list anywhere.  Also syslog shows that ca_list
is null:

Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:322]: 
ksr_tls_fill_missing(): TLSs: 
certificate='/etc/sip-proxy/certs/cert.pem'
Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:329]: 
ksr_tls_fill_missing(): TLSs: ca_list='(null)'
Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:336]: 
ksr_tls_fill_missing(): TLSs: ca_path='/etc/sip-proxy/certs/ca_list'


-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804822963___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Daniel-Constantin Mierla
The error message seems to be related to failure to open `ca_list` file, not to 
`ca_path` -- can you check if `ca_list` is still set somewhere there to an 
invalid file path?

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804799367___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Juha Heinanen
I got latest master properly installed and gave ca_path a try.

I placed four ca certs in directory /etc/sip-proxy/certs/ca_list:

# ls /etc/sip-proxy/certs/ca_list
class3_X0E.crt  dst_root_ca_x3.pem  lets-encrypt-x3-cross-signed.pem  
root_X0F.crt

Then I created file ca_list.pem that contained all of them:

# cat /etc/sip-proxy/certs/ca_list/* > /etc/sip-proxy/certs/ca_list.pem

In tls config file I had:

[client:default]
...
ca_list = /etc/sip-proxy/certs/ca_list.pem

[server:default]
...
ca_list = /etc/sip-proxy/certs/ca_list.pem

Result was that kamailio started OK.

Then in tls config file I replaced ca_list with ca_path:

ca_path = /etc/sip-proxy/certs/ca_list

and kamailio failed to start:

Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: INFO: tls [tls_domain.c:329]: 
ksr_tls_fill_missing(): TLSs: ca_list='(null)'
Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: INFO: tls [tls_domain.c:336]: 
ksr_tls_fill_missing(): TLSs: ca_path='/etc/sip-proxy/certs/ca_list'
...
Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: ERROR: tls [tls_domain.c:601]: 
load_ca_list(): TLSs: Error while setting client CA list
Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): load_ca_list:error:0200100E:system library:fopen:Bad address
Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: ERROR: tls [tls_util.h:42]: 
tls_err_ret(): load_ca_list:error:20074002:BIO routines:file_ctrl:system lib
Mar 23 12:19:06 lohi /usr/bin/sip-proxy[1435]: ERROR:  
[core/sr_module.c:865]: init_mod_child(): error while initializing module tls 
(/usr/lib/x86_64-linux-gnu/sip-proxy/modules/tls.so) (idx: 0 rank: -127 desc: 
[main])

___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread juha-h
Looks like installation of new version of kamailio had failed and tls
module was not updated.  Trying again ...


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804775191___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread juha-h
Thanks for your work on ca_path. It is so that currently ca_path can
only be given as tls module config parameter and not in tls config
file.   I tried like this:

modparam("tls", "config", "/etc/sip-proxy/tls.cfg")

tls.cfg:

[server:default]
verify_certificate = yes
require_certificate = no
server_name = lohi.tutpro.com
tls_method = TLSv1.1+
private_key = /etc/sip-proxy/certs/key.pem
certificate = /etc/sip-proxy/certs/cert.pem
ca_path = /etc/sip-proxy/certs/ca_list

and got error at start:

Mar 23 11:47:18 lohi /usr/bin/sip-proxy[25175]: ERROR:  
[core/cfg_parser.c:731]: sr_cfg_parse(): tls.cfg:7:1: Unsupported option 
'ca_path'


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804768330___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] [kamailio/kamailio] add ca_path param to tls module (#2682)

2021-03-23 Thread Daniel-Constantin Mierla
Being Kamailio specific coding, I added the config option and set it value as 
parameter to SSL_CTX_load_verify_locations() based on the feature request 
description, but it might not be complete implementation because its manual 
specify that the folder content is not send to client via 
SSL_CTX_set_client_CA_list():

  * 
https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_load_verify_locations.html

I haven't tested at all, not having a system that I could easily simulate the 
scenario. If not complete, feel free to add the missing part related, 
otherwise, if not useful at all, it can be reverted.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2682#issuecomment-804710128___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:70929120: tls: test the pointer to CA file path when setting the client property

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: 70929120769113d636c19dac69bbe13ee8689410
URL: 
https://github.com/kamailio/kamailio/commit/70929120769113d636c19dac69bbe13ee8689410

Author: Daniel-Constantin Mierla 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T12:53:38+01:00

tls: test the pointer to CA file path when setting the client property

---

Modified: src/modules/tls/tls_domain.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/70929120769113d636c19dac69bbe13ee8689410.diff
Patch: 
https://github.com/kamailio/kamailio/commit/70929120769113d636c19dac69bbe13ee8689410.patch

---

diff --git a/src/modules/tls/tls_domain.c b/src/modules/tls/tls_domain.c
index bfc2e38d3f..ab45fa7136 100644
--- a/src/modules/tls/tls_domain.c
+++ b/src/modules/tls/tls_domain.c
@@ -580,9 +580,9 @@ static int load_ca_list(tls_domain_t* d)
DBG("%s: No CA list configured\n", tls_domain_str(d));
return 0;
}
-   if (d->ca_file.len>0 && fix_shm_pathname(>ca_file) < 0)
+   if (d->ca_file.s && d->ca_file.len>0 && fix_shm_pathname(>ca_file) < 
0)
return -1;
-   if (d->ca_path.len>0 && fix_shm_pathname(>ca_path) < 0)
+   if (d->ca_path.s && d->ca_path.len>0 && fix_shm_pathname(>ca_path) < 
0)
return -1;
procs_no=get_max_procs();
for(i = 0; i < procs_no; i++) {
@@ -594,7 +594,7 @@ static int load_ca_list(tls_domain_t* d)
TLS_ERR("load_ca_list:");
return -1;
}
-   if(d->ca_file.len>0) {
+   if(d->ca_file.s && d->ca_file.len>0) {
SSL_CTX_set_client_CA_list(d->ctx[i],
SSL_load_client_CA_file(d->ca_file.s));
if (SSL_CTX_get_client_CA_list(d->ctx[i]) == 0) {


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailiodev-nightly-binaries » i386,jessie #1889

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailiodev-nightly-binaries » amd64,jessie #1889

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailiodev-nightly-binaries » amd64,trusty #1889

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailiodev-nightly-binaries » i386,trusty #1889

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:f35101a9: tls: log file name if failure to set the client CA list

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: f35101a9e0f9960880eb2bf83966da90f76496b5
URL: 
https://github.com/kamailio/kamailio/commit/f35101a9e0f9960880eb2bf83966da90f76496b5

Author: Daniel-Constantin Mierla 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T12:29:19+01:00

tls: log file name if failure to set the client CA list

---

Modified: src/modules/tls/tls_domain.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/f35101a9e0f9960880eb2bf83966da90f76496b5.diff
Patch: 
https://github.com/kamailio/kamailio/commit/f35101a9e0f9960880eb2bf83966da90f76496b5.patch

---

diff --git a/src/modules/tls/tls_domain.c b/src/modules/tls/tls_domain.c
index 620f8682ea..bfc2e38d3f 100644
--- a/src/modules/tls/tls_domain.c
+++ b/src/modules/tls/tls_domain.c
@@ -598,7 +598,10 @@ static int load_ca_list(tls_domain_t* d)
SSL_CTX_set_client_CA_list(d->ctx[i],
SSL_load_client_CA_file(d->ca_file.s));
if (SSL_CTX_get_client_CA_list(d->ctx[i]) == 0) {
-   ERR("%s: Error while setting client CA list\n", 
tls_domain_str(d));
+   ERR("%s: Error while setting client CA list 
file [%.*s/%d]\n",
+   tls_domain_str(d), 
(d->ca_file.s)?d->ca_file.len:0,
+   (d->ca_file.s)?d->ca_file.s:"",
+   d->ca_file.len);
TLS_ERR("load_ca_list:");
return -1;
}


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio54-nightly-binaries » i386,jessie #81

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio54-nightly-binaries » amd64,jessie #81

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] git:master:e85a5a6a: http_async_client: disable HTTP/2 multiplexing

2021-03-23 Thread Federico Cabiddu
Just seen that you already did it, sorry!


On Tue, Mar 23, 2021 at 12:17 PM Federico Cabiddu <
federico.cabi...@gmail.com> wrote:

> Ops, I'll fix it!
>
> On Tue, Mar 23, 2021 at 11:16 AM Victor Seva <
> linuxman...@torreviejawireless.org> wrote:
>
>> Hi Federico!
>>
>> On 3/22/21 8:09 PM, Federico Cabiddu wrote:
>> > Module: kamailio
>> > Branch: master
>> > Commit: e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
>> > URL:
>> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
>> >
>> > Author: Federico Cabiddu 
>> > Committer: Federico Cabiddu 
>> > Date: 2021-03-22T20:09:12+01:00
>> >
>> > http_async_client: disable HTTP/2 multiplexing
>> >
>> > ---
>> >
>> > Modified: src/modules/http_async_client/http_multi.c
>> >
>> > ---
>> >
>> > Diff:
>> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.diff
>> > Patch:
>> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.patch
>> >
>> > ---
>> >
>> > diff --git a/src/modules/http_async_client/http_multi.c
>> b/src/modules/http_async_client/http_multi.c
>> > index 4f5cb30da8..c4351b1b94 100644
>> > --- a/src/modules/http_async_client/http_multi.c
>> > +++ b/src/modules/http_async_client/http_multi.c
>> > @@ -402,6 +402,7 @@ int init_http_multi(struct event_base *evbase,
>> struct http_m_global *wg)
>> >   curl_multi_setopt(g->multi, CURLMOPT_SOCKETDATA, g);
>> >   curl_multi_setopt(g->multi, CURLMOPT_TIMERFUNCTION,
>> multi_timer_cb);
>> >   curl_multi_setopt(g->multi, CURLMOPT_TIMERDATA, g);
>> > + curl_multi_setopt(g->multi, CURLMOPT_PIPELINING,
>> CURLPIPE_NOTHING);
>> >
>> >   return init_http_m_table(hash_size);
>> >  }
>> >
>>
>> Sadly CURLPIPE_NOTHING was introduced at 7.43.0 [0] so jessie and trusty
>> builds are broken right now
>>
>> [0] https://curl.se/libcurl/c/symbols-in-versions.html
>>
>> ___
>> Kamailio (SER) - Development Mailing List
>> sr-dev@lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev
>>
>
___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio54-nightly-binaries » amd64,trusty #81

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio54-nightly-binaries » i386,trusty #81

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] git:master:e85a5a6a: http_async_client: disable HTTP/2 multiplexing

2021-03-23 Thread Federico Cabiddu
Ops, I'll fix it!

On Tue, Mar 23, 2021 at 11:16 AM Victor Seva <
linuxman...@torreviejawireless.org> wrote:

> Hi Federico!
>
> On 3/22/21 8:09 PM, Federico Cabiddu wrote:
> > Module: kamailio
> > Branch: master
> > Commit: e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
> > URL:
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
> >
> > Author: Federico Cabiddu 
> > Committer: Federico Cabiddu 
> > Date: 2021-03-22T20:09:12+01:00
> >
> > http_async_client: disable HTTP/2 multiplexing
> >
> > ---
> >
> > Modified: src/modules/http_async_client/http_multi.c
> >
> > ---
> >
> > Diff:
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.diff
> > Patch:
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.patch
> >
> > ---
> >
> > diff --git a/src/modules/http_async_client/http_multi.c
> b/src/modules/http_async_client/http_multi.c
> > index 4f5cb30da8..c4351b1b94 100644
> > --- a/src/modules/http_async_client/http_multi.c
> > +++ b/src/modules/http_async_client/http_multi.c
> > @@ -402,6 +402,7 @@ int init_http_multi(struct event_base *evbase,
> struct http_m_global *wg)
> >   curl_multi_setopt(g->multi, CURLMOPT_SOCKETDATA, g);
> >   curl_multi_setopt(g->multi, CURLMOPT_TIMERFUNCTION,
> multi_timer_cb);
> >   curl_multi_setopt(g->multi, CURLMOPT_TIMERDATA, g);
> > + curl_multi_setopt(g->multi, CURLMOPT_PIPELINING, CURLPIPE_NOTHING);
> >
> >   return init_http_m_table(hash_size);
> >  }
> >
>
> Sadly CURLPIPE_NOTHING was introduced at 7.43.0 [0] so jessie and trusty
> builds are broken right now
>
> [0] https://curl.se/libcurl/c/symbols-in-versions.html
>
> ___
> Kamailio (SER) - Development Mailing List
> sr-dev@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev
>
___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio53-nightly-binaries » i386,jessie #137

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio53-nightly-binaries » amd64,jessie #137

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio53-nightly-binaries » i386,trusty #137

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Jenkins build is back to normal : kamailio53-nightly-binaries » amd64,trusty #137

2021-03-23 Thread kamailio
See 



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:5.3:a9b4ef9e: http_async_client: fix build with older versionss of libcurl

2021-03-23 Thread Victor Seva
Module: kamailio
Branch: 5.3
Commit: a9b4ef9e6267f9f69b4f3903c71280bb31d582c3
URL: 
https://github.com/kamailio/kamailio/commit/a9b4ef9e6267f9f69b4f3903c71280bb31d582c3

Author: Victor Seva 
Committer: Victor Seva 
Date: 2021-03-23T11:33:53+01:00

http_async_client: fix build with older versionss of libcurl

* CURLPIPE_NOTHING was introduced at libcurl 7.43.0

(cherry picked from commit d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1)

---

Modified: src/modules/http_async_client/http_multi.h

---

Diff:  
https://github.com/kamailio/kamailio/commit/a9b4ef9e6267f9f69b4f3903c71280bb31d582c3.diff
Patch: 
https://github.com/kamailio/kamailio/commit/a9b4ef9e6267f9f69b4f3903c71280bb31d582c3.patch

---

diff --git a/src/modules/http_async_client/http_multi.h 
b/src/modules/http_async_client/http_multi.h
index 10070eb6bd..0e63811df7 100644
--- a/src/modules/http_async_client/http_multi.h
+++ b/src/modules/http_async_client/http_multi.h
@@ -48,6 +48,10 @@
 #include "hm_hash.h"
 
 
+#ifndef CURLPIPE_NOTHING
+#define CURLPIPE_NOTHING   0L
+#endif
+
 extern stat_var *requests;
 extern stat_var *replies;
 extern stat_var *errors;


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:5.4:b5089e59: http_async_client: fix build with older versionss of libcurl

2021-03-23 Thread Victor Seva
Module: kamailio
Branch: 5.4
Commit: b5089e59fa460f0312e57cbf3d629a308c1e7c2c
URL: 
https://github.com/kamailio/kamailio/commit/b5089e59fa460f0312e57cbf3d629a308c1e7c2c

Author: Victor Seva 
Committer: Victor Seva 
Date: 2021-03-23T11:33:21+01:00

http_async_client: fix build with older versionss of libcurl

* CURLPIPE_NOTHING was introduced at libcurl 7.43.0

(cherry picked from commit d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1)

---

Modified: src/modules/http_async_client/http_multi.h

---

Diff:  
https://github.com/kamailio/kamailio/commit/b5089e59fa460f0312e57cbf3d629a308c1e7c2c.diff
Patch: 
https://github.com/kamailio/kamailio/commit/b5089e59fa460f0312e57cbf3d629a308c1e7c2c.patch

---

diff --git a/src/modules/http_async_client/http_multi.h 
b/src/modules/http_async_client/http_multi.h
index 10070eb6bd..0e63811df7 100644
--- a/src/modules/http_async_client/http_multi.h
+++ b/src/modules/http_async_client/http_multi.h
@@ -48,6 +48,10 @@
 #include "hm_hash.h"
 
 
+#ifndef CURLPIPE_NOTHING
+#define CURLPIPE_NOTHING   0L
+#endif
+
 extern stat_var *requests;
 extern stat_var *replies;
 extern stat_var *errors;


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:d82d95a8: http_async_client: fix build with older versionss of libcurl

2021-03-23 Thread Victor Seva
Module: kamailio
Branch: master
Commit: d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1
URL: 
https://github.com/kamailio/kamailio/commit/d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1

Author: Victor Seva 
Committer: Victor Seva 
Date: 2021-03-23T11:30:18+01:00

http_async_client: fix build with older versionss of libcurl

* CURLPIPE_NOTHING was introduced at libcurl 7.43.0

---

Modified: src/modules/http_async_client/http_multi.h

---

Diff:  
https://github.com/kamailio/kamailio/commit/d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1.diff
Patch: 
https://github.com/kamailio/kamailio/commit/d82d95a824d6f8a6c0246b78ac6642d4d6fed9e1.patch

---

diff --git a/src/modules/http_async_client/http_multi.h 
b/src/modules/http_async_client/http_multi.h
index 10070eb6bd..0e63811df7 100644
--- a/src/modules/http_async_client/http_multi.h
+++ b/src/modules/http_async_client/http_multi.h
@@ -48,6 +48,10 @@
 #include "hm_hash.h"
 
 
+#ifndef CURLPIPE_NOTHING
+#define CURLPIPE_NOTHING   0L
+#endif
+
 extern stat_var *requests;
 extern stat_var *replies;
 extern stat_var *errors;


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


Re: [sr-dev] git:master:e85a5a6a: http_async_client: disable HTTP/2 multiplexing

2021-03-23 Thread Victor Seva
Hi Federico!

On 3/22/21 8:09 PM, Federico Cabiddu wrote:
> Module: kamailio
> Branch: master
> Commit: e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
> URL: 
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b
> 
> Author: Federico Cabiddu 
> Committer: Federico Cabiddu 
> Date: 2021-03-22T20:09:12+01:00
> 
> http_async_client: disable HTTP/2 multiplexing
> 
> ---
> 
> Modified: src/modules/http_async_client/http_multi.c
> 
> ---
> 
> Diff:  
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.diff
> Patch: 
> https://github.com/kamailio/kamailio/commit/e85a5a6ae2ae01159ef4aeffd9f51f58c7bc844b.patch
> 
> ---
> 
> diff --git a/src/modules/http_async_client/http_multi.c 
> b/src/modules/http_async_client/http_multi.c
> index 4f5cb30da8..c4351b1b94 100644
> --- a/src/modules/http_async_client/http_multi.c
> +++ b/src/modules/http_async_client/http_multi.c
> @@ -402,6 +402,7 @@ int init_http_multi(struct event_base *evbase, struct 
> http_m_global *wg)
>   curl_multi_setopt(g->multi, CURLMOPT_SOCKETDATA, g);
>   curl_multi_setopt(g->multi, CURLMOPT_TIMERFUNCTION, multi_timer_cb);
>   curl_multi_setopt(g->multi, CURLMOPT_TIMERDATA, g);
> + curl_multi_setopt(g->multi, CURLMOPT_PIPELINING, CURLPIPE_NOTHING);
>  
>   return init_http_m_table(hash_size);
>  }
> 

Sadly CURLPIPE_NOTHING was introduced at 7.43.0 [0] so jessie and trusty
builds are broken right now

[0] https://curl.se/libcurl/c/symbols-in-versions.html

___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:eb3fd406: modules: readme files regenerated - tls ... [skip ci]

2021-03-23 Thread Kamailio Dev
Module: kamailio
Branch: master
Commit: eb3fd40609a3ddd88bc2642e768e3a0523a0c747
URL: 
https://github.com/kamailio/kamailio/commit/eb3fd40609a3ddd88bc2642e768e3a0523a0c747

Author: Kamailio Dev 
Committer: Kamailio Dev 
Date: 2021-03-23T09:16:22+01:00

modules: readme files regenerated - tls ... [skip ci]

---

Modified: src/modules/tls/README

---

Diff:  
https://github.com/kamailio/kamailio/commit/eb3fd40609a3ddd88bc2642e768e3a0523a0c747.diff
Patch: 
https://github.com/kamailio/kamailio/commit/eb3fd40609a3ddd88bc2642e768e3a0523a0c747.patch


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] Errored: kamailio/kamailio#10006 (master - 80e8bd5)

2021-03-23 Thread Travis CI
Build Update for kamailio/kamailio
-

Build: #10006
Status: Errored

Duration: 1 min and 17 secs
Commit: 80e8bd5 (master)
Author: Daniel-Constantin Mierla
Message: core: config.h - define TLS_CA_PATH

View the changeset: 
https://github.com/kamailio/kamailio/compare/46dee155ee10...242badad1c21

View the full build log and details: 
https://travis-ci.org/github/kamailio/kamailio/builds/764063225?utm_medium=notification_source=email


--

You can unsubscribe from build emails from the kamailio/kamailio repository 
going to 
https://travis-ci.org/account/preferences/unsubscribe?repository=3596148_medium=notification_source=email.
Or unsubscribe from *all* email updating your settings at 
https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification_source=email.
Or configure specific recipients for build notifications in your .travis.yml 
file. See https://docs.travis-ci.com/user/notifications.

___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:242badad: tls: docs for ca_path config option [skip ci]

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: 242badad1c2176b061cb7595c3e3ff5a469ad1d5
URL: 
https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5a469ad1d5

Author: Daniel-Constantin Mierla 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T09:11:02+01:00

tls: docs for ca_path config option [skip ci]

---

Modified: src/modules/tls/doc/params.xml

---

Diff:  
https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5a469ad1d5.diff
Patch: 
https://github.com/kamailio/kamailio/commit/242badad1c2176b061cb7595c3e3ff5a469ad1d5.patch

---

diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml
index 63a964d45c..80dbe2f3cc 100644
--- a/src/modules/tls/doc/params.xml
+++ b/src/modules/tls/doc/params.xml
@@ -208,6 +208,32 @@ modparam("tls", "ca_list", 
"/usr/local/etc/kamailio/ca_list.pem")


 
+   
+   ca_path (str)
+   
+   Sets the path with the trusted CA files, to be given as 
parameter
+   SSL_CTX_load_verify_locations(). The certificates in ca_path 
are only
+   looked up when required, e.g. when building the certificate 
chain
+   or when actually performing the verification of a peer 
certificate. They
+   are not given to the client (not loaded to be provided to
+   SSL_CTX_set_client_CA_list()), only the ones in ca_list files 
are sent
+   to the client. It requires to use c_rehash to generate the hash 
map
+   for certificate search, for more see the manual of libssl for
+   SSL_CTX_load_verify_locations() function.
+   
+   
+   By default it is not set.
+   
+   
+   Set ca_path parameter
+   
+...
+modparam("tls", "ca_path", "/usr/local/etc/kamailio/ca")
+...
+   
+   
+   
+

crl (string)



___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:80e8bd5d: core: config.h - define TLS_CA_PATH

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: 80e8bd5dd034beb9621381dc7cfc69258d3d
URL: 
https://github.com/kamailio/kamailio/commit/80e8bd5dd034beb9621381dc7cfc69258d3d

Author: Daniel-Constantin Mierla 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T09:11:02+01:00

core: config.h - define TLS_CA_PATH

---

Modified: src/core/config.h

---

Diff:  
https://github.com/kamailio/kamailio/commit/80e8bd5dd034beb9621381dc7cfc69258d3d.diff
Patch: 
https://github.com/kamailio/kamailio/commit/80e8bd5dd034beb9621381dc7cfc69258d3d.patch

---

diff --git a/src/core/config.h b/src/core/config.h
index 06fe5cbb7b..e54413b5bc 100644
--- a/src/core/config.h
+++ b/src/core/config.h
@@ -45,6 +45,7 @@
 #define TLS_PKEY_FILE "cert.pem"   /*!< The certificate private key file */
 #define TLS_CERT_FILE "cert.pem"   /*!< The certificate file */
 #define TLS_CA_FILE 0  /*!< no CA list file by default */
+#define TLS_CA_PATH 0  /*!< no CA directory path by default */
 #define TLS_CRL_FILE 0 /*!< no CRL by default */
 
 #define CHILD_NO8  /*!< default number of child processes 
started */


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:d62f7a95: tls: added ca_path config option

2021-03-23 Thread Daniel-Constantin Mierla
Module: kamailio
Branch: master
Commit: d62f7a95bb87e6bee5f88bb928b23e509d57cfea
URL: 
https://github.com/kamailio/kamailio/commit/d62f7a95bb87e6bee5f88bb928b23e509d57cfea

Author: Daniel-Constantin Mierla 
Committer: Daniel-Constantin Mierla 
Date: 2021-03-23T09:11:02+01:00

tls: added ca_path config option

- used to provide path to directory with CA files in pem format, to be
given as parameter to SSL_CTX_load_verify_locations()
- GH #2682

---

Modified: src/modules/tls/tls_cfg.c
Modified: src/modules/tls/tls_cfg.h
Modified: src/modules/tls/tls_config.c
Modified: src/modules/tls/tls_domain.c
Modified: src/modules/tls/tls_domain.h
Modified: src/modules/tls/tls_mod.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/d62f7a95bb87e6bee5f88bb928b23e509d57cfea.diff
Patch: 
https://github.com/kamailio/kamailio/commit/d62f7a95bb87e6bee5f88bb928b23e509d57cfea.patch


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:915b90d2: Merge branch 'master' of https://github.com/kamailio/kamailio.git

2021-03-23 Thread Robert Boisvert
Module: kamailio
Branch: master
Commit: 915b90d22f21bdc0caeafbcdf1a5cc925bd4d2a0
URL: 
https://github.com/kamailio/kamailio/commit/915b90d22f21bdc0caeafbcdf1a5cc925bd4d2a0

Author: Robert Boisvert 
Committer: Robert Boisvert 
Date: 2021-03-22T10:45:11-04:00

Merge branch 'master' of https://github.com/kamailio/kamailio.git

---

Modified: src/modules/rtpengine/rtpengine.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/915b90d22f21bdc0caeafbcdf1a5cc925bd4d2a0.diff
Patch: 
https://github.com/kamailio/kamailio/commit/915b90d22f21bdc0caeafbcdf1a5cc925bd4d2a0.patch

---

diff --git a/src/modules/rtpengine/rtpengine.c 
b/src/modules/rtpengine/rtpengine.c
index 8b751eb48a..7114b08d40 100644
--- a/src/modules/rtpengine/rtpengine.c
+++ b/src/modules/rtpengine/rtpengine.c
@@ -1829,6 +1829,7 @@ static int build_rtpp_socks(int lmode, int rtest) {
rtpe_reload_lock_get(rtpp_list->rset_lock);
for (pnode=rtpp_list->rn_first; pnode!=0; pnode = 
pnode->rn_next) {
char *hostname;
+   char *hp;
 
if (pnode->rn_umode == 0) {
rtpp_socks[pnode->idx] = -1;
@@ -1860,11 +1861,23 @@ static int build_rtpp_socks(int lmode, int rtest) {
if (cp == NULL || *cp == '\0')
cp = CPORT;
 
+   if(pnode->rn_umode == 6) {
+   hp = strrchr(hostname, ']');
+   if(hp != NULL)
+   *hp = '\0';
+
+   hp = hostname;
+   if(*hp == '[')
+   hp++;
+   } else {
+   hp = hostname;
+   }
+
memset(, 0, sizeof(hints));
hints.ai_flags = 0;
hints.ai_family = (pnode->rn_umode == 6) ? AF_INET6 : 
AF_INET;
hints.ai_socktype = SOCK_DGRAM;
-   if ((n = getaddrinfo(hostname, cp, , )) != 0) 
{
+   if ((n = getaddrinfo(hp, cp, , )) != 0) {
LM_ERR("%s\n", gai_strerror(n));
pkg_free(hostname);
rtpp_socks[pnode->idx] = -1;


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:c576631b: mohqueue: use ptime

2021-03-23 Thread Robert Boisvert
Module: kamailio
Branch: master
Commit: c576631b899ded661bbfede48fa92fd03dbc7e88
URL: 
https://github.com/kamailio/kamailio/commit/c576631b899ded661bbfede48fa92fd03dbc7e88

Author: Robert Boisvert 
Committer: Robert Boisvert 
Date: 2021-03-22T10:44:21-04:00

mohqueue: use ptime

- version 1.7
- match ptime of incoming call; otherwise, default to 20ms
- update copyright dates

---

Modified: src/modules/mohqueue/README
Modified: src/modules/mohqueue/doc/mohqueue.xml
Modified: src/modules/mohqueue/doc/mohqueue_admin.xml
Modified: src/modules/mohqueue/mohq_common.h
Modified: src/modules/mohqueue/mohq_db.c
Modified: src/modules/mohqueue/mohq_db.h
Modified: src/modules/mohqueue/mohq_funcs.c
Modified: src/modules/mohqueue/mohq_funcs.h
Modified: src/modules/mohqueue/mohq_locks.c
Modified: src/modules/mohqueue/mohq_locks.h
Modified: src/modules/mohqueue/mohqueue_mod.c
Modified: src/modules/mohqueue/mohqueue_mod.h

---

Diff:  
https://github.com/kamailio/kamailio/commit/c576631b899ded661bbfede48fa92fd03dbc7e88.diff
Patch: 
https://github.com/kamailio/kamailio/commit/c576631b899ded661bbfede48fa92fd03dbc7e88.patch


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:1d456523: Merge branch 'master' of https://github.com/kamailio/kamailio.git

2021-03-23 Thread Robert Boisvert
Module: kamailio
Branch: master
Commit: 1d456523e7459dfb5caebc2f8d7c7ca350dd4647
URL: 
https://github.com/kamailio/kamailio/commit/1d456523e7459dfb5caebc2f8d7c7ca350dd4647

Author: Robert Boisvert 
Committer: Robert Boisvert 
Date: 2021-03-22T10:19:27-04:00

Merge branch 'master' of https://github.com/kamailio/kamailio.git

---

Added: misc/fuzz/README.md
Added: misc/fuzz/fuzz_uri.c
Added: src/modules/jwt/Makefile
Added: src/modules/jwt/README
Added: src/modules/jwt/doc/Makefile
Added: src/modules/jwt/doc/jwt.xml
Added: src/modules/jwt/doc/jwt_admin.xml
Added: src/modules/jwt/jwt_mod.c
Added: src/modules/lrkproxy/Makefile
Added: src/modules/lrkproxy/README
Added: src/modules/lrkproxy/doc/Makefile
Added: src/modules/lrkproxy/doc/lrkproxy.xml
Added: src/modules/lrkproxy/doc/lrkproxy_admin.xml
Added: src/modules/lrkproxy/lrkproxy.c
Added: src/modules/lrkproxy/lrkproxy.h
Added: src/modules/lrkproxy/lrkproxy_funcs.c
Added: src/modules/lrkproxy/lrkproxy_funcs.h
Added: src/modules/lrkproxy/lrkproxy_hash.c
Added: src/modules/lrkproxy/lrkproxy_hash.h
Added: src/modules/stirshaken/Makefile
Added: src/modules/stirshaken/README
Added: src/modules/stirshaken/doc/Makefile
Added: src/modules/stirshaken/doc/stirshaken.xml
Added: src/modules/stirshaken/doc/stirshaken_admin.xml
Added: src/modules/stirshaken/stirshaken_mod.c
Modified: etc/kamailio.cfg
Modified: pkg/kamailio/obs/kamailio.spec
Modified: src/Makefile.groups
Modified: src/core/cfg.lex
Modified: src/core/cfg.y
Modified: src/core/globals.h
Modified: src/core/resolve.c
Modified: src/core/str_list.h
Modified: src/core/tcp_init.h
Modified: src/core/tcp_main.c
Modified: src/main.c
Modified: src/modules/carrierroute/cr_data.c
Modified: src/modules/carrierroute/cr_db.c
Modified: src/modules/carrierroute/cr_db.h
Modified: src/modules/carrierroute/cr_domain.h
Modified: src/modules/corex/corex_mod.c
Modified: src/modules/cplc/cpl_run.c
Modified: src/modules/ctl/binrpc_run.c
Modified: src/modules/ctl/fifo_server.c
Modified: src/modules/ctl/io_listener.c
Modified: src/modules/dialplan/dp_db.c
Modified: src/modules/dispatcher/dispatch.c
Modified: src/modules/dispatcher/dispatcher.c
Modified: src/modules/dmq/README
Modified: src/modules/dmq/dmq.c
Modified: src/modules/dmq/dmq_funcs.c
Modified: src/modules/dmq/dmqnode.c
Modified: src/modules/dmq/doc/dmq_admin.xml
Modified: src/modules/dmq/notification_peer.c
Modified: src/modules/dmq/worker.c
Modified: src/modules/htable/htable.c
Modified: src/modules/ims_charging/Ro_data.h
Modified: src/modules/ims_diameter_server/ims_diameter_server.c
Modified: src/modules/mangler/contact_ops.c
Modified: src/modules/ndb_redis/redis_client.c
Modified: src/modules/pipelimit/README
Modified: src/modules/pipelimit/doc/pipelimit_admin.xml
Modified: src/modules/pipelimit/pipelimit.c
Modified: src/modules/pipelimit/pl_ht.c
Modified: src/modules/presence/presence_dmq.c
Modified: src/modules/pv/pv_branch.c
Modified: src/modules/pv_headers/pvh_func.c
Modified: src/modules/pv_headers/pvh_hash.c
Modified: src/modules/pv_headers/pvh_str.c
Modified: src/modules/pv_headers/pvh_str.h
Modified: src/modules/registrar/README
Modified: src/modules/registrar/doc/registrar_admin.xml
Modified: src/modules/rtp_media_server/Makefile
Modified: src/modules/siputils/contact_ops.c
Modified: src/modules/smsops/smsops_impl.c
Modified: src/modules/textops/README
Modified: src/modules/textops/doc/textops_admin.xml
Modified: src/modules/textops/textops.c
Modified: src/modules/tm/t_cancel.c
Modified: src/modules/topos/README
Modified: src/modules/topos/doc/topos.xml
Modified: src/modules/topos/doc/topos_admin.xml
Modified: src/modules/topos/topos_mod.c
Modified: src/modules/topos/tps_msg.c
Modified: src/modules/topos/tps_storage.c
Modified: src/modules/topos/tps_storage.h
Modified: src/modules/topos_redis/README
Modified: src/modules/topos_redis/doc/topos_redis.xml
Modified: src/modules/topos_redis/topos_redis_storage.c
Modified: src/modules/uac/README
Modified: src/modules/uac/doc/uac_admin.xml
Modified: src/modules/uac/uac.c
Modified: src/modules/uac_redirect/README
Modified: src/modules/uac_redirect/doc/uac_redirect_admin.xml
Modified: src/modules/uac_redirect/rd_funcs.c
Modified: src/modules/uac_redirect/uac_redirect.c
Modified: src/modules/usrloc/README
Modified: src/modules/usrloc/doc/usrloc_admin.xml
Modified: src/modules/usrloc/ul_rpc.c
Modified: src/modules/usrloc/usrloc_mod.c
Modified: src/modules/xmlrpc/xmlrpc.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/1d456523e7459dfb5caebc2f8d7c7ca350dd4647.diff
Patch: 
https://github.com/kamailio/kamailio/commit/1d456523e7459dfb5caebc2f8d7c7ca350dd4647.patch


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev


[sr-dev] git:master:7c793a6e: * pkg/docker rewind

2021-03-23 Thread Robert Boisvert
Module: kamailio
Branch: master
Commit: 7c793a6e8d9b33e20ca6f62ec5e37300a5f31e51
URL: 
https://github.com/kamailio/kamailio/commit/7c793a6e8d9b33e20ca6f62ec5e37300a5f31e51

Author: Robert Boisvert 
Committer: Robert Boisvert 
Date: 2021-03-22T10:18:42-04:00

* pkg/docker rewind

---

Modified: pkg/docker

---

Diff:  
https://github.com/kamailio/kamailio/commit/7c793a6e8d9b33e20ca6f62ec5e37300a5f31e51.diff
Patch: 
https://github.com/kamailio/kamailio/commit/7c793a6e8d9b33e20ca6f62ec5e37300a5f31e51.patch

---

diff --git a/pkg/docker b/pkg/docker
index 643e06d780..b1c54322f0 16
--- a/pkg/docker
+++ b/pkg/docker
@@ -1 +1 @@
-Subproject commit 643e06d7809ad8150b23c2662be0532868e3f66b
+Subproject commit b1c54322f0f490786772db41c4390d7687ed16a6


___
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev