Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Message-ID: <44ABDF62.1010201@id.ethz.ch>
Date: Wed, 05 Jul 2006 17:48:50 +0200
From: Matteo Corti <matteo.corti@id.ethz.ch>
Organization: ETH Zurich
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
 rv:1.8) Gecko/20051201 Thunderbird/1.5 Mnenhy/0.7.3.0
MIME-Version: 1.0
To: users@httpd.apache.org
References: <44AA8256.8030801@id.ethz.ch>
 <e498c1660607040808q4e6cb16dh325310ef9cab86ae@mail.gmail.com>
In-Reply-To: <e498c1660607040808q4e6cb16dh325310ef9cab86ae@mail.gmail.com>
OpenPGP: id=4820809B;
	url=http://matteocorti.ch
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Subject: Re: [users@httpd] segmentation fault with SSLCertificateChainFile

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua Slive wrote:
> On 7/4/06, Matteo Corti <matteo.corti@id.ethz.ch> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hi,
>>
>> I am managing several web servers with a very similar configuration. On
>> one instance I get a segmentation fault if I specify the
>> SSLCertificateChainFile option (I am using 2.0.58).
>>
>> If I remove the directive the problem disappears.
>>
>> - - the certificate file is OK (it is the very same file I use for other
>>   instances which are working w/o problems)
>>
>> - - executing httpd with strace I get the following
>>
> 
> http://httpd.apache.org/dev/debugging.html
> 

Dear Joshua.

many thanks but I hoped that there was something easier that I was
missing. In any case I recompiled httpd with debugging support and
discovered the following:

httpd is crashing in

0x0044feaa in sk_pop_free () from
/usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8

(gdb) bt
#0  0x0051f39a in sk_pop_free () from
/usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8
#1  0x0928e458 in ?? ()
#2  0x092dcb50 in ?? ()
#3  0xbfffc4c8 in ?? ()
#4  0x0040d9f7 in SSL_CTX_use_certificate_chain (ctx=0x0, file=0xc14d90
"S\203�\f�", skipfirst=16302628, cb=0x3fc820
<ssl_config_global_isfixed>) at ssl_util_ssl.c:488
Previous frame inner to this frame (corrupt stack?)

Now: I know that I could begin to analyze the sources and debug them to
see why it is crashing but my laziness makes me ask again if someone had
some previous experience with a similar problem (i.e., segfaults using
chained SSL certificates).

If this a new issue I suppose I'll have to dig into the source by myself :-)

Thanks again,

Matteo Corti

- --
Matteo Corti
ETH Zurich
Informatikdienste / Basisdienste
matteo.corti@id.ethz.ch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFEq99iLEG/T0gggJsRAk8dAKCYs4+tFskt6QxLLM9oNmzQTvtXVACgoLJj
TQBIn7BxW6djpFisodihU5A=
=YXDT
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org