Hello,
On 3/19/12 7:57 AM, Juha Heinanen wrote:
in tls.cfg, i made ca_list to point to ca-certificates.crt file that
comes with debian. when i then started sip router, i got errors
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:447]:
TLSc<default>: Unable to load CA list '/etc/ssl/certs/ca-certificates.crt'
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]:
load_ca_list:error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]:
load_ca_list:error:0906D041:PEM routines:PEM_read_bio:malloc failure
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR: tls [tls_domain.c:448]:
load_ca_list:error:0B084009:x509 certificate
routines:X509_load_cert_crl_file:PEM lib
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core>
[sr_module.c:889]: init_mod_child(): Error while initializing module tls
(/usr/lib/sip-proxy/modules/tls.so)
Mar 19 08:45:42 test /usr/sbin/sip-proxy[28093]: ERROR:<core> [main.c:1554]:
ERROR: main: error in init_child(PROC_INT) -- exiting
is that because there are too many (= 139) entries in
ca-certificates.crt? if so, how to solve the problem? would it be a
good idea that sip router would be default be able to handle this
correctly?
is this with default mem size?
TLS requires lot more memory that usual UDP to deal with a fair enough
amount of active connections. In debian, there is /etc/default/kamailio
that is used to set -m and -M parameters for using with
/etc/init.d/kamailio.
Cheers,
Daniel
--
Daniel-Constantin Mierla
Kamailio Advanced Training, April 23-26, 2012, Berlin, Germany
http://www.asipto.com/index.php/kamailio-advanced-training/
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
