FS#60392 - [opensips] crash with openssl v1.1.1

Attached to Project: Community Packages
Opened by Thorsten (Thorsten) - Friday, 12 October 2018, 10:48 GMT
Last edited by Sergej Pupykin (sergej) - Thursday, 24 September 2020, 18:11 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The aim of opensips is to be secured with TLS (the ending 's' of the software's name)

Unfortunately with "openssl v1.1.1" using "tls_mgm" module make opensips crashing.
Disabling "tls_mgm" module make opensips starting correctly.

Additional info:
* package version(s)
- opensips 2.4.1-1
- openssl 1.1.1-1

*Steps to reproduce:
With a working configuration using tls_mgm module upgrade to "openssl v1.1.1" and restart opensips.

core dump log:
Process 15934 (opensips) of user 1006 dumped core.

Stack trace of thread 15934:
#0 0x00005636a165da33 fm_malloc (opensips)
#1 0x00007f2b4a7e64c3 n/a (tls_mgm.so)
#2 0x00007f2b4a5ef00a CRYPTO_zalloc (libcrypto.so.1.1)
#3 0x00007f2b4a5e3548 EVP_PKEY_new (libcrypto.so.1.1)
#4 0x00007f2b4a6701c0 n/a (libcrypto.so.1.1)
#5 0x00007f2b4a67032f n/a (libcrypto.so.1.1)
#6 0x00007f2b4a50df8d n/a (libcrypto.so.1.1)
#7 0x00007f2b4a50e781 n/a (libcrypto.so.1.1)
#8 0x00007f2b4a50ea19 n/a (libcrypto.so.1.1)
#9 0x00007f2b4a50e0c2 n/a (libcrypto.so.1.1)
#10 0x00007f2b4a50e781 n/a (libcrypto.so.1.1)
#11 0x00007f2b4a50ea19 n/a (libcrypto.so.1.1)
#12 0x00007f2b4a50e0c2 n/a (libcrypto.so.1.1)
#13 0x00007f2b4a50eb1d ASN1_item_ex_d2i (libcrypto.so.1.1)
#14 0x00007f2b4a50eb9c ASN1_item_d2i (libcrypto.so.1.1)
#15 0x00007f2b4a6005dc PEM_X509_INFO_read_bio (libcrypto.so.1.1)
#16 0x00007f2b4a6606de X509_load_cert_crl_file (libcrypto.so.1.1)
#17 0x00007f2b4a66086d n/a (libcrypto.so.1.1)
#18 0x00007f2b4a6635b3 X509_STORE_set_default_paths (libcrypto.so.1.1)
#19 0x00007f2b49be6dc7 n/a (libldap-2.4.so.2)
#20 0x00007f2b49be434f n/a (libldap-2.4.so.2)
#21 0x00007f2b49be45a4 n/a (libldap-2.4.so.2)
#22 0x00007f2b49be49ed n/a (libldap-2.4.so.2)
#23 0x00007f2b49be51e7 ldap_int_tls_start (libldap-2.4.so.2)
#24 0x00007f2b49be55d2 ldap_start_tls_s (libldap-2.4.so.2)
#25 0x00007f2b49e00844 ldap_connect (ldap.so)
#26 0x00007f2b49e02ce9 n/a (ldap.so)
#27 0x00005636a163cca3 n/a (opensips)
#28 0x00005636a163cbf8 n/a (opensips)
#29 0x00005636a163f88e start_module_procs (opensips)
#30 0x00005636a15b2f48 main (opensips)
#31 0x00007f2b4e159223 __libc_start_main (libc.so.6)
#32 0x00005636a15b39ba _start (opensips)
This task depends upon

Closed by  Sergej Pupykin (sergej)
Thursday, 24 September 2020, 18:11 GMT
Reason for closing:  No response
Comment by Thorsten (Thorsten) - Tuesday, 16 October 2018, 12:24 GMT Comment by Sergej Pupykin (sergej) - Wednesday, 31 October 2018, 13:51 GMT
Can it be reproduced in opensips-2.4.2-1?
Comment by Thorsten (Thorsten) - Wednesday, 31 October 2018, 17:35 GMT
Here is the result:

/usr/bin/opensips[16855]: NOTICE:core:main: version: opensips 2.4.2 (x86_64/linux)
/usr/bin/opensips[16855]: NOTICE:signaling:mod_init: initializing module ...
/usr/bin/opensips[16855]: NOTICE:tls_mgm:init_ssl_ctx_behavior: cipher list set to TLSv1.2
/usr/bin/opensips[16855]: NOTICE:tls_mgm:init_ssl_ctx_behavior: cipher list set to TLSv1.2
/usr/bin/opensips[16855]: NOTICE:tls_mgm:init_tls_dom: no CA dir for tls 'cl_dom1' defined, using default '/etc/pki/CA/'
/usr/bin/opensips[16866]: CRITICAL:core:sig_usr: segfault in process pid: 16866, id: 11
/usr/bin/opensips[16861]: CRITICAL:core:sig_usr: segfault in process pid: 16861, id: 6
/usr/bin/opensips[16868]: CRITICAL:core:sig_usr: segfault in process pid: 16868, id: 13
(...)
/usr/bin/opensips[16872]: CRITICAL:core:handle_tcp_worker: dead tcp worker 5 (EOF received), pid 16868
/usr/bin/opensips[16872]: CRITICAL:core:handle_worker: dead child 13 (EOF received), pid 16868
systemd[1]: opensips.service: Control process exited, code=exited status=255
systemd[1]: opensips.service: Failed with result 'exit-code'.
systemd[1]: Failed to start OpenSIPS daemon.
Comment by Sergej Pupykin (sergej) - Saturday, 29 August 2020, 20:59 GMT
Is it actual for opensips-3.1.0?

Loading...