<p>From modules/tls/tls_init.c</p>
<pre><code>       /* attempt to guess if the library was compiled with kerberos or
         * compression support from the cflags */
        lib_cflags=SSLeay_version(SSLEAY_CFLAGS);
        lib_kerberos=0;
        lib_zlib=0;
        if ((lib_cflags==0) || strstr(lib_cflags, "not available")){
                lib_kerberos=-1;
                lib_zlib=-1;
        }else{
                if (strstr(lib_cflags, "-DZLIB"))
                        lib_zlib=1;
                if (strstr(lib_cflags, "-DKRB5_"))
                        lib_kerberos=1;
        }
        LOG(L_INFO, "tls: _init_tls_h:  compiled  with  openssl  version "
                                "\"%s\" (0x%08lx), kerberos support: %s, compression: %s\n",
                                OPENSSL_VERSION_TEXT, (long)OPENSSL_VERSION_NUMBER,
                                kerberos_support?"on":"off", comp_support?"on":"off");
        LOG(L_INFO, "tls: init_tls_h: installed openssl library version "
                                "\"%s\" (0x%08lx), kerberos support: %s, "
                                " zlib compression: %s"
                                "\n %s\n",
                                SSLeay_version(SSLEAY_VERSION), ssl_version,
                                (lib_kerberos==1)?"on":(lib_kerberos==0)?"off":"unknown",
                                (lib_zlib==1)?"on":(lib_zlib==0)?"off":"unknown",
                                SSLeay_version(SSLEAY_CFLAGS));
        if (lib_kerberos!=kerberos_support){
                if (lib_kerberos!=-1){
                        LOG(L_CRIT, "ERROR: tls: init_tls_h: openssl compile options"
                                                " mismatch: library has kerberos support"
                                                " %s and Kamailio tls %s (unstable configuration)\n"
                                                " (tls_force_run in kamailio.cfg will override this"
                                                " check)\n",
                                                lib_kerberos?"enabled":"disabled",
                                                kerberos_support?"enabled":"disabled"
                                );
                        if (cfg_get(tls, tls_cfg, force_run))
                                LOG(L_WARN, "tls: init_tls_h: tls_force_run turned on, "
                                                "ignoring kerberos support mismatch\n");
                        else
                                return -1; /* exit, is safer */
                }else{
                        LOG(L_WARN, "WARNING: tls: init_tls_h: openssl  compile options"
                                                " missing -- cannot detect if kerberos support is"
                                                " enabled. Possible unstable configuration\n");
                }
        }
</code></pre>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/kamailio/kamailio/issues/1050#issuecomment-290676856">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AF36ZUMnuyc_J_dn3kjhhhEakjlXrTB7ks5rrNSKgaJpZM4MvfDE">mute the thread</a>.<img alt="" height="1" src="https://github.com/notifications/beacon/AF36ZczBpN224kz-MkquyYkH3i91G8Veks5rrNSKgaJpZM4MvfDE.gif" width="1" /></p>
<div itemscope itemtype="http://schema.org/EmailMessage">
<div itemprop="action" itemscope itemtype="http://schema.org/ViewAction">
  <link itemprop="url" href="https://github.com/kamailio/kamailio/issues/1050#issuecomment-290676856"></link>
  <meta itemprop="name" content="View Issue"></meta>
</div>
<meta itemprop="description" content="View this Issue on GitHub"></meta>
</div>

<script type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/kamailio/kamailio","title":"kamailio/kamailio","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/kamailio/kamailio"}},"updates":{"snippets":[{"icon":"PERSON","message":"@linuxmaniac in #1050: From modules/tls/tls_init.c\r\n```\r\n       /* attempt to guess if the library was compiled with kerberos or\r\n\t * compression support from the cflags */\r\n\tlib_cflags=SSLeay_version(SSLEAY_CFLAGS);\r\n\tlib_kerberos=0;\r\n\tlib_zlib=0;\r\n\tif ((lib_cflags==0) || strstr(lib_cflags, \"not available\")){\r\n\t\tlib_kerberos=-1;\r\n\t\tlib_zlib=-1;\r\n\t}else{\r\n\t\tif (strstr(lib_cflags, \"-DZLIB\"))\r\n\t\t\tlib_zlib=1;\r\n\t\tif (strstr(lib_cflags, \"-DKRB5_\"))\r\n\t\t\tlib_kerberos=1;\r\n\t}\r\n\tLOG(L_INFO, \"tls: _init_tls_h:  compiled  with  openssl  version \"\r\n\t\t\t\t\"\\\"%s\\\" (0x%08lx), kerberos support: %s, compression: %s\\n\",\r\n\t\t\t\tOPENSSL_VERSION_TEXT, (long)OPENSSL_VERSION_NUMBER,\r\n\t\t\t\tkerberos_support?\"on\":\"off\", comp_support?\"on\":\"off\");\r\n\tLOG(L_INFO, \"tls: init_tls_h: installed openssl library version \"\r\n\t\t\t\t\"\\\"%s\\\" (0x%08lx), kerberos support: %s, \"\r\n\t\t\t\t\" zlib compression: %s\"\r\n\t\t\t\t\"\\n %s\\n\",\r\n\t\t\t\tSSLeay_version(SSLEAY_VERSION), ssl_version,\r\n\t\t\t\t(lib_kerberos==1)?\"on\":(lib_kerberos==0)?\"off\":\"unknown\",\r\n\t\t\t\t(lib_zlib==1)?\"on\":(lib_zlib==0)?\"off\":\"unknown\",\r\n\t\t\t\tSSLeay_version(SSLEAY_CFLAGS));\r\n\tif (lib_kerberos!=kerberos_support){\r\n\t\tif (lib_kerberos!=-1){\r\n\t\t\tLOG(L_CRIT, \"ERROR: tls: init_tls_h: openssl compile options\"\r\n\t\t\t\t\t\t\" mismatch: library has kerberos support\"\r\n\t\t\t\t\t\t\" %s and Kamailio tls %s (unstable configuration)\\n\"\r\n\t\t\t\t\t\t\" (tls_force_run in kamailio.cfg will override this\"\r\n\t\t\t\t\t\t\" check)\\n\",\r\n\t\t\t\t\t\tlib_kerberos?\"enabled\":\"disabled\",\r\n\t\t\t\t\t\tkerberos_support?\"enabled\":\"disabled\"\r\n\t\t\t\t);\r\n\t\t\tif (cfg_get(tls, tls_cfg, force_run))\r\n\t\t\t\tLOG(L_WARN, \"tls: init_tls_h: tls_force_run turned on, \"\r\n\t\t\t\t\t\t\"ignoring kerberos support mismatch\\n\");\r\n\t\t\telse\r\n\t\t\t\treturn -1; /* exit, is safer */\r\n\t\t}else{\r\n\t\t\tLOG(L_WARN, \"WARNING: tls: init_tls_h: openssl  compile options\"\r\n\t\t\t\t\t\t\" missing -- cannot detect if kerberos support is\"\r\n\t\t\t\t\t\t\" enabled. Possible unstable configuration\\n\");\r\n\t\t}\r\n\t}\r\n```"}],"action":{"name":"View Issue","url":"https://github.com/kamailio/kamailio/issues/1050#issuecomment-290676856"}}}</script>