-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joshua Slive wrote: > On 7/4/06, Matteo Corti <matteo.corti@xxxxxxxxxx> wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi, >> >> I am managing several web servers with a very similar configuration. On >> one instance I get a segmentation fault if I specify the >> SSLCertificateChainFile option (I am using 2.0.58). >> >> If I remove the directive the problem disappears. >> >> - - the certificate file is OK (it is the very same file I use for other >> instances which are working w/o problems) >> >> - - executing httpd with strace I get the following >> > > http://httpd.apache.org/dev/debugging.html > Dear Joshua. many thanks but I hoped that there was something easier that I was missing. In any case I recompiled httpd with debugging support and discovered the following: httpd is crashing in 0x0044feaa in sk_pop_free () from /usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8 (gdb) bt #0 0x0051f39a in sk_pop_free () from /usr/pack/openssl-0.9.8b-mc/lib/libcrypto.so.0.9.8 #1 0x0928e458 in ?? () #2 0x092dcb50 in ?? () #3 0xbfffc4c8 in ?? () #4 0x0040d9f7 in SSL_CTX_use_certificate_chain (ctx=0x0, file=0xc14d90 "S\203ì\fè", skipfirst=16302628, cb=0x3fc820 <ssl_config_global_isfixed>) at ssl_util_ssl.c:488 Previous frame inner to this frame (corrupt stack?) Now: I know that I could begin to analyze the sources and debug them to see why it is crashing but my laziness makes me ask again if someone had some previous experience with a similar problem (i.e., segfaults using chained SSL certificates). If this a new issue I suppose I'll have to dig into the source by myself :-) Thanks again, Matteo Corti - -- Matteo Corti ETH Zurich Informatikdienste / Basisdienste matteo.corti@xxxxxxxxxx -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFEq99iLEG/T0gggJsRAk8dAKCYs4+tFskt6QxLLM9oNmzQTvtXVACgoLJj TQBIn7BxW6djpFisodihU5A= =YXDT -----END PGP SIGNATURE----- --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|