<DIV>Dear Klaus,</DIV> <DIV> </DIV> <DIV>Thank you very much.</DIV> <DIV> </DIV> <DIV>This is the version of openssl in Fedora Core 5 that I have got:</DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>[root@sip ~]# rpm -qa|grep -i ssl</FONT></DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>openssl-0.9.8a-5.2</FONT></DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>openssl-devel-0.9.8a-5.2</FONT></DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>openssl097a-0.9.7a-4.2.1</FONT></DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>docbook-style-dsssl-1.79-4</FONT></DIV> <DIV class=MsoNormal style="MARGIN: 0cm 0cm 0pt"><FONT face="Times New Roman" size=3>mod_ssl-2.2.0-5.1.2</FONT></DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9
L'"><FONT face="Times New Roman">[root@sip ~]#</FONT></SPAN></DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman"></FONT></SPAN> </DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman">Please Klaus..Help me...Please.</FONT></SPAN></DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman">Regards,</FONT></SPAN></DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman"></FONT></SPAN> </DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman"></FONT></SPAN> </DIV> <DIV><SPAN style="FONT-SIZE: 12pt; FONT-FAMILY: 'Nimbus Roman No9 L'"><FONT face="Times New Roman">Ferianto</FONT></SPAN></DIV><BR><BR><B><I>Klaus Darilion <klaus.mailinglists@pernau.at></I></B> wrote: <BLOCKQUOTE class=replbq style="PADDING-LEFT:
5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">The problem is, that the openssl library on Fedora 5 behaves different<BR>than usual. What version of openssl is used by Fedory 5?<BR><BR>regards<BR>klaus<BR><BR>On Sat, September 9, 2006 13:46, Ferianto siregar said:<BR>> Dear Klaus,<BR>><BR>> Thank you very much for you kind-hearted to reply my message. Thank you<BR>> very much.<BR>> Klaus, I still do not understand what you mean .Maybe because I have<BR>> lack skill in this system.<BR>> So, yesterday I tried to check file tls_init.c that there is in #<BR>> openser-1.1.0-tls/tls directory.<BR>> I found the script that you write below in tls_init.c file . Both of<BR>> them are same (the script that you write below and the script in<BR>> tls_ini.c file).<BR>> So, I am confused, what should I do? What I have to change so TLS can<BR>> run in my openser?<BR>> Would you mind giving me explanation, Please..<BR>><BR>> Thank you
very much<BR>><BR>> Regards,<BR>><BR>><BR>> Ferianto<BR>><BR>> Klaus Darilion <KLAUS.MAILINGLISTS@PERNAU.AT>wrote:<BR>> Ferianto siregar wrote:<BR>>> Dear all,<BR>>><BR>>> I would like to say thanks to all of you for your kind-hearted read my<BR>>> message. Thank you very much.<BR>>> All, I need you help now.Please..<BR>>> Now, I tried to build openser with TLS in Fedora Core 5. Before, I use<BR>>> Redhat 9 and the openser installation can be build successfully.( I can<BR>>> make a call with TLS support)<BR>>> But, Why when I tried to install it in Fedora Core 5, the openser can<BR>>> not run?(there is no pid for openser)<BR>>> But, When I erase the TLS configuration (TLS script for enable the TLS)<BR>>> in openser.cfg, the openser can run successfully.(There is a pid).<BR>>> So, in my opinion, the TLS Script in openser.cfg is error.<BR>>> But, I need this script to
make secure openser server (openser with TLS<BR>>> support).<BR>>><BR>>> What should I do? I do hope anybody can give a suggestion. Please help<BR>>> me...Please..<BR>><BR>> Maybe the openssl library is different on fedora. The interesintg pieco<BR>> of code is:<BR>><BR>> #if (OPENSSL_VERSION_NUMBER >= 0x00908000L) && !defined(OPENSSL_NO_COMP)<BR>> /* disabling compression */<BR>> LOG(L_ERR, "WARNING:init_tls: disabling compression due ZLIB problems\n");<BR>> comp_methods = SSL_COMP_get_compression_methods();<BR>> if (comp_methods==0) {<BR>> LOG(L_ERR, "ERRRO:init_tls: null openssl compression<BR>> methods\n");<BR>> return -1;<BR>> }<BR>> sk_SSL_COMP_zero(comp_methods);<BR>> #endif<BR>><BR>> I wonder why it is an error if the comp_methods are zero. Then we do not<BR>> have to disable them.<BR>><BR>> regards<BR>> klaus<BR>><BR>><BR>>><BR>>> Thank you very
much<BR>>><BR>>> Regards,<BR>>><BR>>><BR>>> Ferianto<BR>>><BR>>> Note:<BR>>> 1. This is the error message that I got when execute, # openser,<BR>>> command:<BR>>> 0(8715) DEBUG:socket2str:<BR>>> 0(8715) DEBUG:socket2str:<BR>>> 0(8715) DEBUG:socket2str:<BR>>> Listening on<BR>>> udp: 202.95.149.251 [202.95.149.251]:5060<BR>>> tcp: 202.95.149.251 [202.95.149.251]:5060<BR>>> tls: 202.95.149.251 [202.95.149.251]:5061<BR>>> Aliases:<BR>>> tls: sip:5061<BR>>> tls: sip.pcr.ac.id:5061<BR>>> tcp: sip:5060<BR>>> tcp: sip.pcr.ac.id:5060<BR>>> udp: sip:5060<BR>>> udp: sip.pcr.ac.id:5060<BR>>><BR>>> 0(8715) fm_malloc_init: F_OPTIMIZE=16384, /ROUNDTO=2048<BR>>> 0(8715) fm_malloc_init: F_HASH_SIZE=2067, fm_block size=16560<BR>>> 0(8715) fm_malloc_init(0xb5fbb000, 33554432), start=0xb5fbb000<BR>>> 0(8715) shm_mem_init:
success<BR>>> 0(8715) init_tcp: using epoll_lt as the io watch method (auto detected)<BR>>> 0(8715) init_tls: Entered<BR>>> 0(8715) WARNING:init_tls: disabling compression due ZLIB problems<BR>>> 0(8715) ERRRO:init_tls: null openssl compression methods<BR>>> 0(8715) could not initialize tls, exiting...<BR>>> 0(8715) DEBUG: tm_shutdown : start<BR>>> 0(8715) DEBUG: tm_shutdown : emptying hash table<BR>>> 0(8715) DEBUG: tm_shutdown : releasing timers<BR>>> 0(8715) DEBUG: tm_shutdown : removing semaphores<BR>>> 0(8715) DEBUG: tm_shutdown : destroying tmcb lists<BR>>> 0(8715) DEBUG: tm_shutdown : done<BR>>> 0(8715) destroy_tls: Entered<BR>>> 0(8715) shm_mem_destroy<BR>>> 0(8715) destroying the shared memory lock<BR>>><BR>>> 2. This is the contain part of openser.cfg<BR>>><BR>>> listen=202.95.149.250<BR>>> port=5060<BR>>> children=4<BR>>> dns=no # (cmd.
line: -r)<BR>>> rev_dns=no # (cmd. line: -R)<BR>>> fifo="/tmp/openser_fifo"<BR>>> fifo_db_url="mysql://openser:openserrw@localhost/openser"<BR>>> fifo_mode=0666<BR>>> alias="pcr.ac.id"<BR>>><BR>>> # uncomment the following lines for TLS support<BR>>> disable_tls = 0<BR>>> listen = tls:202.95.149.250:5061<BR>>> tls_verify_client = on<BR>>> tls_require_client_certificate = on<BR>>> tls_verify_server=on<BR>>> tls_method = TLSv1<BR>>> tls_certificate = "/usr/local/etc/openser/tls/user/user-cert.pem"<BR>>> tls_private_key = "/usr/local/etc/openser/tls/user/user-privkey.pem"<BR>>> tls_ca_list = "/usr/local/etc/openser/tls/user/user-calist.pem"<BR>>><BR>>> # ------------------ module loading ----------------------------------<BR>>> # Uncomment this if you want to use SQL database loadmodule<BR>>> "/usr/local/lib/openser/modules/mysql.so" loadmodule<BR>>>
"/usr/local/lib/openser/modules/sl.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/tm.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/rr.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/maxfwd.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/usrloc.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/registrar.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/auth.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/auth_db.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/uri.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/uri_db.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/mediaproxy.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/nathelper.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/textops.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/avpops.so" loadmodule<BR>>> "/usr/local/lib/openser/modules/domain.so" loadmodule<BR>>>
"/usr/local/lib/openser/modules/permissions.so"<BR>>><BR>>> ------------------------------------------------------------------------<BR>>> Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great<BR>>> rates starting at 1¢/min.<BR>>><BR>>><BR>>><BR>>><BR>>> ------------------------------------------------------------------------<BR>>><BR>>> _______________________________________________<BR>>> Devel mailing list<BR>>> Devel@openser.org<BR>>> http://openser.org/cgi-bin/mailman/listinfo/devel<BR>>><BR>><BR>><BR>><BR>><BR>> ---------------------------------<BR>> Stay in the know. Pulse on the new Yahoo.com. Check it out.<BR><BR><BR></BLOCKQUOTE><BR><p> 
<hr size=1>Stay in the know. Pulse on the new Yahoo.com. <a href="http://us.rd.yahoo.com/evt=42974/*http://www.yahoo.com/preview"> Check it out.</a>