From ebe784858abe795776b6ec7774d65e0dfc7f9890 Mon Sep 17 00:00:00 2001 From: Luis Azedo Date: Tue, 24 Sep 2024 12:38:14 +0100 Subject: [PATCH] SUPP-503 add tls_threads_mode * use upstream new parameters for openssl >= 3 issues related to tls module * defaults are set for known working values after testing on sleepygary (cherry picked from commit a0a9dfc491ce2828f3552a1c2ca57fab1cfb882e) --- kamailio/tls-role.cfg | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/kamailio/tls-role.cfg b/kamailio/tls-role.cfg index 2246a952..f0eb80f3 100644 --- a/kamailio/tls-role.cfg +++ b/kamailio/tls-role.cfg @@ -1,9 +1,12 @@ #!trydef TLS_CONFIG_FILE /etc/kazoo/kamailio/tls.cfg -#!trydef KZ_TLS_INIT_MODE 3 +#!trydef KZ_TLS_INIT_MODE 1 +#!trydef KZ_TLS_THREADS_MODE 2 +#!trydef KZ_TLS_LOG_LEVEL 1 #!substdef "!TLS_CFG!$def(TLS_CONFIG_FILE)!g" enable_tls = yes +tls_threads_mode = KZ_TLS_THREADS_MODE #!ifndef WITHOUT_DEFAULT_LISTENER listen=TLS_SIP @@ -71,12 +74,14 @@ listen=TLS_LB_ADVERTISE_ALG #!endif ####### TLS Parameters ######### +#!ifndef MOD_tls loadmodule "tls.so" +#!endif modparam("tls", "config", "TLS_CFG") modparam("tls", "low_mem_threshold1", 1) modparam("tls", "low_mem_threshold2", 1) modparam("tls", "xavp_cfg", "tls") modparam("tls", "init_mode", KZ_TLS_INIT_MODE) -modparam("debugger", "mod_level", "tls=1") +modparamx("debugger", "mod_level", "tls=$def(KZ_TLS_LOG_LEVEL)")