Dear Maintainer,
kamailio in trixie should be recompiled and linked against the
openssl library bundled with trixie.
Current version won't start after upgrade from Bookworm and shows
the following message in syslog which pretty much sums up the problem:
"tls_h_mod_init_f(): installed openssl library version is too different
from the library the kamailio tls module was compiled with:
installed "OpenSSL 3.5.1 1 Jul 2025",
compiled "OpenSSL 3.4.1 11 Feb 2025" (0x30400010).
Please make sure a compatible version is used
(tls_force_run in kamailio.cfg will override this check)."
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
This is an outdated assumption in kamailio's version comparison, which was written for OpenSSL v0.9.x. You can with configuring tls_force_run.
I know there is a workaround, but skipping safety checks isn't a permanent solution. Why not just recompile the package? Am Freitag, dem 22.08.2025 um 15:07 +0200 schrieb Bastian Germann:
I know there is a workaround, but skipping safety checks isn't a permanent solution. Why not just recompile the package? Am Freitag, dem 22.08.2025 um 15:07 +0200 schrieb Bastian Germann:
Am Freitag, dem 22.08.2025 um 17:24 +0200 schrieb Bastian Germann: in production without warning using "kamailio -c" which is really really annoying ... Pretty pretty please with sugar on top: just recompile and reupload.
We believe that the bug you reported is fixed in the latest version of kamailio, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1110867@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Bastian Germann <bage@debian.org> (supplier of updated kamailio package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Thu, 28 Aug 2025 11:37:11 +0200 Source: kamailio Architecture: source Version: 6.0.2-3 Distribution: unstable Urgency: medium Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Bastian Germann <bage@debian.org> Closes: 1060901 1110867 1111253 Changes: kamailio (6.0.2-3) unstable; urgency=medium . * Team upload * Check only major OpenSSL version (Closes: #1110867) * Build secsipid modules for available archs (Closes: #1060901) * Support mongodb v2 (Closes: #1111253) Checksums-Sha1: 92e021ec1b541bccf7764bfb5cd53a840f5d0dc8 6218 kamailio_6.0.2-3.dsc a7bcba7cb3c40fb72e5548335baca09ad52f0d05 43328 kamailio_6.0.2-3.debian.tar.xz 5e314c8871c193964926573c060134d15a3ff9da 6177 kamailio_6.0.2-3_source.buildinfo Checksums-Sha256: 876785f50a155588b6dde043e08a354ac35f2e3a347c44ff085d36615472b7c7 6218 kamailio_6.0.2-3.dsc b1dff770f994c5e19079f3ad997c464c08cb476fd690c3f555d0cde8a25a55e3 43328 kamailio_6.0.2-3.debian.tar.xz e95e661469d97c174237886db53f17a465c572fbce661da5928ec3fab5532532 6177 kamailio_6.0.2-3_source.buildinfo Files: 2a479dbc6aed7a6524bbe1ed7a387984 6218 net optional kamailio_6.0.2-3.dsc 3bb5499b0c32b6909133c08894e537eb 43328 net optional kamailio_6.0.2-3.debian.tar.xz 6a97419b7f5317695dc58014ef91c0e7 6177 net optional kamailio_6.0.2-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmiwI5UQHGJhZ2VAZGVi aWFuLm9yZwAKCRAfXHqLRVZDFHWZDACFTkArwo1ZFwcCE8ZEeTmw2VPczth1VmlS fJwQY378ht8k8GlRSKlzbhdq/nUIVLmSdPM7Y/O0FKSrq4GKoHOvZrMtc8ru7hZJ Q07NDjugwruL0tZpaFsVV/GfFk62U1+LWwfKeSBS0ocq3WtLzm+VPE7ituVXmG8+ a9A8mnwBW/0YrZshqom8ys/wgeSxlFsuNvKBHkWVpxbVp6URco0nLdNQN0RwjTyc mPfT0tU4CWZdNSijObUgG4NmEzWkss/RI3dah/M5d+S8LETzxEZIgJDOR35WQqla b7x9O6ufBFHeHrfsOyOX+uohNlCWW3qWdtd9l9HRgskgnRv+y6Y5S4FSc53xzeAe TeZHBhk5v6t6dgo6/HW9Zbq2XMUB9crApkKng4G8UZavYLtun9wP6EVtCRhZ6oeZ M8fpa7zbVdpFGAM9PCqEuTgq1qrm2KQdGS2M/KCOxlfUJwKUuet4R8fbFcNoJiC+ jqXOlh+ZGTt8ANc090wfQxhue9B7ddU= =PIwa -----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of kamailio, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1110867@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Bastian Germann <bage@debian.org> (supplier of updated kamailio package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Thu, 28 Aug 2025 12:54:46 +0200 Source: kamailio Architecture: source Version: 6.0.1-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Bastian Germann <bage@debian.org> Closes: 1110867 Changes: kamailio (6.0.1-1+deb13u1) trixie; urgency=medium . * Team upload * Check only major OpenSSL version (Closes: #1110867) Checksums-Sha1: fff46df41c96390c3e1f23c9f748e263c131838c 6224 kamailio_6.0.1-1+deb13u1.dsc f2f7006aeb425e491fb2a3a8aeb5841cf7962c4d 42304 kamailio_6.0.1-1+deb13u1.debian.tar.xz 089dbf1b34505f5458a7e0d9e5cd44d10cf7b808 5975 kamailio_6.0.1-1+deb13u1_source.buildinfo Checksums-Sha256: a4eb6046916870ebbd311104c9c7dfb6f513d132f6f3fe82d39ce4d8eaf2f5b7 6224 kamailio_6.0.1-1+deb13u1.dsc 661ddc7866c5a853fa31a61357bb4f72814475a4e45716b5c2826fa88e64c895 42304 kamailio_6.0.1-1+deb13u1.debian.tar.xz c0f12f970ea3d657ac96b2f411f764a4f2ecd8b38bc352fcfe027d67ce565db7 5975 kamailio_6.0.1-1+deb13u1_source.buildinfo Files: 9f0a8fb144656542d277f9615fc7338f 6224 net optional kamailio_6.0.1-1+deb13u1.dsc 8e5b5031c47b96d608c03ef428ecf5f9 42304 net optional kamailio_6.0.1-1+deb13u1.debian.tar.xz 437cc9154682d98c9ca943f206252282 5975 net optional kamailio_6.0.1-1+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmiz8uoQHGJhZ2VAZGVi aWFuLm9yZwAKCRAfXHqLRVZDFLqmDADKIWGVYyf18llPTG277TW7yIUQ5ILr7FuC 6Wbl1XSB/+obaad6SjVjMnek7EGHXD81/wDmlywexIkBefsdn/Yph3ozbiDsPqWJ AGuRmaoX74n3IPReM/3AY/mD8VjnXZFRoud6RY0l/Gsormo9RNzJaBYjPSgmsUH9 0zH9/FKEFC2+q4SuCcV4On2bao0XJje/+tgKSEjtE7CN8nDtLB5N0HEaKM0oExCk FcgsXALsi0KmZNJZtGhh3H1faHLnoCvsjTFeW/NaxkqiB0QG4EdkXT7ob53KxPR7 8WWnqKgEoobaHI+JqffECrXqXMhw05JzzcgJhiEIBQ+rXAssXRWTMI+jIl8+qi51 cN77wVLHimnLW66vR4vdOi4MJ7FI9OsUOHoLfVMBpmxe387nLRn/vCJay6Vo7i6j 0r6sh85eVFuI9QMZrwDqSw8oStCKT/GiHEN7l5GwkCNNN/4jhg8sPCb3zpdJLiWu WcMi+QoKBiNALmxxvCbDT7X/sqpGM30= =Db0R -----END PGP SIGNATURE-----