ddas-rt created an issue (kamailio/kamailio#4777)
### Description
We are seeing the `tls: ssl bug #1491` issue reoccur every 60-90 days(no TLS
reloads). After a kamailio restart the issue resolves and reoccurs again after
the said interval.
- Using kamailio 6.0.3 (x86_64/linux) with -m 256 -M 32.
- Running on an AWS c5.4xlarge instance Debian GNU/Linux 13.4 (trixie).
- 30Gb RAM
```
free -h
total used free shared buff/cache available
Mem: 30Gi 4.3Gi 1.3Gi 30Mi 25Gi 26Gi
Swap: 0B 0B 0B
```
Error log:
`ERROR: tls [tls_server.c:232]: tls_complete_init(): tls: ssl bug #1491
workaround: not enough memory for safe operation: shm=16536160
threshold1=17301504`
### Troubleshooting
Restarting kamailio resolves the issue temporarily.
#### Reproduction
Issue reoccur every 60-90days.
#### Debugging Data
No core dumps.
#### Log Messages
```
usr/local/sbin/kamailio[3350844]: ERROR: tls [tls_server.c:232]:
tls_complete_init(): tls: ssl bug #1491 workaround: not enough memory for safe
operation: shm=16536160 threshold1=17301504
```
#### SIP Traffic
```
Any SIP over TLS traffic
```
### Possible Solutions
<!--
If you found a solution or workaround for the issue, describe it. Ideally,
provide a pull request with a fix.
-->
### Additional Information
* **Kamailio Version** - output of `kamailio -v`
```
version: kamailio 6.0.3 (x86_64/linux) 728776
flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE,
USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC,
F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT,
USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES,
TLS_PTHREAD_MUTEX_SHARED
ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_SEND_BUFFER_SIZE
262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 728776
compiled on 00:18:23 Sep 18 2025 with gcc 14.2.0
```
* **Operating System**:
```
Linux ip-172-31-58-67 6.12.73+deb13-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian
6.12.73-1 (2026-02-17) x86_64 GNU/Linux
```
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4777
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/[email protected]>_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the
sender!
