Saurabh, You had originally mentioned you were using openssl 1.1.1, and my workaround was concerning that. I see now that you are trying to use openssl 3. I will defer to the OpenSIPS team on this, but as it is 2 major versions newer I would expect that openssl version would need explicit support from OpenSIPS, as many of the interfaces and APIs are likely very different from openssl 1, which is what OpenSIPS currently supports. I would not expect it to just work out of the box.
Since OpenSIPS has started moving to a different crypto library, I’m not sure whether openssl 3 support is planned. Ben Newlin From: Users <[email protected]> on behalf of Saurabh Chopra <[email protected]> Date: Monday, January 17, 2022 at 8:58 AM To: OpenSIPS users mailling list <[email protected]> Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1 Hi All, Workaround given by Ben has done some part. Opensips 3.2.3 is compiled with latest openssl version 3.0.1 but still I am not able to run my configuration file. Errors coming like below:- Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:sr_load_module: could not open module </usr/local/lib64/opensips/modules/tls_openssl.so>: /usr/local/lib64/opensips/modules/tls_openssl.so: undefined symbol: OPENSSL_sk_num Jan 17 13:30:05 ip-192-168-0-56 opensips: ERROR:core:load_module: failed to load module Jan 17 13:30:05 ip-192-168-0-56 opensips: Traceback (last included file at the bottom): Jan 17 13:30:05 ip-192-168-0-56 opensips: 0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg Jan 17 13:30:05 ip-192-168-0-56 opensips: CRITICAL:core:yyerror: parse error in /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:74:13-14: failed to load module tls_openssl.so Could you please help us resolve this? Best Regards Saurabh Chopra +918861979979 On Sat, Jan 15, 2022 at 9:27 PM Ben Newlin <[email protected]<mailto:[email protected]>> wrote: Apologies, I misspoke. It is not due to any change in OpenSIPS. It is caused by the change to openssl-1.1.1. We actually encountered the issue using OpenSIPS 2.4, which still uses the shared libraries Ben Newlin From: Users <[email protected]<mailto:[email protected]>> on behalf of Ben Newlin <[email protected]<mailto:[email protected]>> Date: Saturday, January 15, 2022 at 10:54 AM To: OpenSIPS users mailling list <[email protected]<mailto:[email protected]>>, Răzvan Crainea <[email protected]<mailto:[email protected]>>, [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1 We ran into this too. I assume it is due to the change from using openssl as a shared library to a statically linked one. We were able to resolve by setting the environment variable “LDFLAGS” to a value of “-pthread” before the make command. $ LDFLAGS=-pthread make … or $ export LDFLAGS=-pthread $ make … I’m not a C expert, but that could possibly be added to the standard OpenSIPS build configuration. Ben Newlin From: Users <[email protected]<mailto:[email protected]>> on behalf of Saurabh Chopra <[email protected]<mailto:[email protected]>> Date: Saturday, January 15, 2022 at 2:48 AM To: OpenSIPS users mailling list <[email protected]<mailto:[email protected]>>, Răzvan Crainea <[email protected]<mailto:[email protected]>>, [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: Re: [OpenSIPS-Users] Facing some issue while running opensips 3.2 latest branch with openssl-1.1.1 Hi Opensips Team/ Razvan, Thanks for the response, but when i tried to compile opensips version (3.2.3) with latest openssl version (3.0.1 14 Dec 2021) on Centos 7 machine, it throws me erros, Linking opensips main.o: In function `pthread_mutex_init': /opt/opensips-codechanged-3.2/ssl_tweaks.h:32: undefined reference to `pthread_mutexattr_setpshared' /opt/opensips-codechanged-3.2/ssl_tweaks.h:38: undefined reference to `pthread_mutexattr_destroy' /opt/opensips-codechanged-3.2/ssl_tweaks.h:26: undefined reference to `pthread_mutexattr_init' main.o: In function `pthread_rwlock_init': /opt/opensips-codechanged-3.2/ssl_tweaks.h:64: undefined reference to `pthread_rwlockattr_setpshared' /opt/opensips-codechanged-3.2/ssl_tweaks.h:70: undefined reference to `pthread_rwlockattr_destroy' /opt/opensips-codechanged-3.2/ssl_tweaks.h:58: undefined reference to `pthread_rwlockattr_init' collect2: error: ld returned 1 exit status make: *** [opensips] Error 1 Same errors found on the GITHUB ticket https://github.com/OpenSIPS/opensips/issues/2088<https://github.com/OpenSIPS/opensips/issues/2088> but the machine was Debian. And the package dependencies in the answer given by Liviu let us install openssl version 1.0.2, which we don't want to, because if we do, it will compile the opensips with 1.0.2 openssl version. Kindly help us in this matter, we are stuck here. Best Regards Saurabh Chopra +918861979979 On Mon, Jan 3, 2022 at 2:06 PM Răzvan Crainea <[email protected]<mailto:[email protected]>> wrote: Hi, Sasmita! You probably compiled opensips 3.2 with a previous openssl version, then replaced it with the new one. You need to re-compile tls_openssl with the new version to get this fixed. Best regards, Răzvan Crainea OpenSIPS Core Developer http://www.opensips-solutions.com<http://www.opensips-solutions.com> On 12/21/21 12:30, Sasmita Panda wrote: > Hi All , > > I have taken opensips 3.2 latest code and configure with tls_openssl to > support proto_tls proto_wss and tls_gm . > I have installed openssl-1.1.1 . (Rtpeninge latest branch is not > suported with older version of openssl , so I have taken the newer > version here ) > > > Installation is successful . While running the opensips process I am > getting the below error . > *ERROR:core:sr_load_module: could not open module > </usr/local/lib64/opensips/modules/auth.so>: > /usr/local/lib64/opensips/modules/auth.so: undefined symbol: EVP_MD_CTX_free > ERROR:core:load_module: failed to load module > Traceback (last included file at the bottom): > 0. /usr/local/etc/opensips/opensips_webrtc_reg.cfg > CRITICAL:core:yyerror: parse error in > /usr/local/etc/opensips/opensips_webrtc_reg.cfg:134:13-14: failed to > load module auth.so > * > > * ERROR:core:sr_load_module: could not open module > </usr/local/lib64/opensips/modules/tls_openssl.so>: > /usr/local/lib64/opensips/modules/tls_openssl.so: undefined symbol: > OPENSSL_sk_num > ERROR:core:load_module: failed to load module > Traceback (last included file at the bottom): > 0. /usr/local/etc/opensips/opensips_webrtc_proxy.cfg > CRITICAL:core:yyerror: parse error in > /usr/local/etc/opensips/opensips_webrtc_proxy.cfg:77:13-14: failed to > load module tls_openssl.so* > > Can anyone help me how to resolve this please ? > > */Thanks & Regards/* > /Sasmita Panda/ > /Senior Network Testing and Software Engineer/ > /3CLogic , ph:07827611765/ > > _______________________________________________ > Users mailing list > [email protected]<mailto:[email protected]> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users> _______________________________________________ Users mailing list [email protected]<mailto:[email protected]> http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users> _______________________________________________ Users mailing list [email protected]<mailto:[email protected]> http://lists.opensips.org/cgi-bin/mailman/listinfo/users<http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
_______________________________________________ Users mailing list [email protected] http://lists.opensips.org/cgi-bin/mailman/listinfo/users
