httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matteo Corti <matteo.co...@id.ethz.ch>
Subject Re: [users@httpd] segmentation fault with SSLCertificateChainFile
Date Wed, 05 Jul 2006 15:48:50 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua Slive wrote:
> On 7/4/06, Matteo Corti <matteo.corti@id.ethz.ch> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hi,
>>
>> I am managing several web servers with a very similar configuration. On
>> one instance I get a segmentation fault if I specify the
>> SSLCertificateChainFile option (I am using 2.0.58).
>>
>> If I remove the directive the problem disappears.
>>
>> - - the certificate file is OK (it is the very same file I use for other
>>   instances which are working w/o problems)
>>
>> - - executing httpd with strace I get the following
>>
> 
> http://httpd.apache.org/dev/debugging.html
> 

Dear Joshua.

many thanks but I hoped that there was something easier that I was
missing. In any case I recompiled httpd with debugging support and
discovered the following:

httpd is crashing in

0x0044feaa in sk_pop_free () from
/usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8

(gdb) bt
#0  0x0051f39a in sk_pop_free () from
/usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8
#1  0x0928e458 in ?? ()
#2  0x092dcb50 in ?? ()
#3  0xbfffc4c8 in ?? ()
#4  0x0040d9f7 in SSL_CTX_use_certificate_chain (ctx=0x0, file=0xc14d90
"S\203ì\fè", skipfirst=16302628, cb=0x3fc820
<ssl_config_global_isfixed>) at ssl_util_ssl.c:488
Previous frame inner to this frame (corrupt stack?)

Now: I know that I could begin to analyze the sources and debug them to
see why it is crashing but my laziness makes me ask again if someone had
some previous experience with a similar problem (i.e., segfaults using
chained SSL certificates).

If this a new issue I suppose I'll have to dig into the source by myself :-)

Thanks again,

Matteo Corti

- --
Matteo Corti
ETH Zurich
Informatikdienste / Basisdienste
matteo.corti@id.ethz.ch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFEq99iLEG/T0gggJsRAk8dAKCYs4+tFskt6QxLLM9oNmzQTvtXVACgoLJj
TQBIn7BxW6djpFisodihU5A=
=YXDT
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message