Sudden seg fault on openconnect after system updates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello OpenConnect developers,

My earlier message got stuck in a moderation queue, because adding the crash report put it over 40k.
Below is my original message without the crash report.  I'll be happy to send it separately if you
think it might be useful.

===

I have been happily using OpenConnect to access my VPN via a smartcard up until this morning.  I
dropped my linux laptop off with IT for some updates, and I now am suddenly getting seg
faults.  I've tried troubleshooting a few things with IT to no avail, and am hoping you might have a
suggestion of what to try.

$ cat /etc/redhat-release 
CentOS Linux release 7.7.1908 (Core)

$ sudo yum list openconnect
Installed Packages
openconnect.x86_64        7.08-1.el7              @epel

Note: version 7.08 has been, and still is, the latest available for Centos 7, and had worked
seemlessly until the system updates.


Below is the redacted output with -vvv and --dump:

$ openconnect -vvv --dump --config=/home/rsindlin/.cisco/openconnect.conf -c pkcs11:id=%01 --
authgroup=XXXX https://xxx.xxx.xxx/
POST https://xxx.xxx.xxx/
Attempting to connect to server ddd.ddd.ddd.d:443
Connected to ddd.ddd.ddd.d:443
Using PKCS#11 certificate pkcs11:id=%01;type=cert
Trying PKCS#11 key URL pkcs11:id=%01;type=private
Trying PKCS#11 key URL
pkcs11:model=PKCS%2315%20emulated;manufacturer=piv_II;serial=944f2d808286d7e7;token=PIV_II;id=%01;ty
pe=private
PIN required for PIV_II
Enter PIN:
Using PKCS#11 key
pkcs11:model=PKCS%2315%20emulated;manufacturer=piv_II;serial=944f2d808286d7e7;token=PIV_II;id=%01;ty
pe=private
Using client certificate 'Randall Sindlinger (affiliate)'
Adding supporting CA '<unknown>'
Adding supporting CA '<unknown>'
Segmentation fault (core dumped)


Of note, I don't know if the '<unknown>' in the output above is indicative of a problem or not.  In
addition to the package updates, which are detailed later, the maintenance included installing the
following new certs:
$ ls /etc/pki/CA/certs/
federalcommonpolicyca.pem       nasaoperationalca_5ccb3196.pem  ustreasuryrootca_6b70.pem
nasaoperationalca_4a61d2a5.pem  noca_cacert.pem
nasaoperationalca_4e398116.pem  ustreasuryrootca_6405.pem



The updates included a kernel update, but booting into the old kernel did not resolve the
problem.  Below is the yum history of today's updates:


Packages Altered:
    Updated NetworkManager-1:1.18.0-5.el7_7.1.x86_64                      @updates
    Update                 1:1.18.0-5.el7_7.2.x86_64                      @updates
    Updated NetworkManager-adsl-1:1.18.0-5.el7_7.1.x86_64                 @updates
    Update                      1:1.18.0-5.el7_7.2.x86_64                 @updates
    Updated NetworkManager-bluetooth-1:1.18.0-5.el7_7.1.x86_64            @updates
    Update                           1:1.18.0-5.el7_7.2.x86_64            @updates
    Updated NetworkManager-glib-1:1.18.0-5.el7_7.1.x86_64                 @updates
    Update                      1:1.18.0-5.el7_7.2.x86_64                 @updates
    Updated NetworkManager-libnm-1:1.18.0-5.el7_7.1.x86_64                @updates
    Update                       1:1.18.0-5.el7_7.2.x86_64                @updates
    Updated NetworkManager-ppp-1:1.18.0-5.el7_7.1.x86_64                  @updates
    Update                     1:1.18.0-5.el7_7.2.x86_64                  @updates
    Updated NetworkManager-team-1:1.18.0-5.el7_7.1.x86_64                 @updates
    Update                      1:1.18.0-5.el7_7.2.x86_64                 @updates
    Updated NetworkManager-tui-1:1.18.0-5.el7_7.1.x86_64                  @updates
    Update                     1:1.18.0-5.el7_7.2.x86_64                  @updates
    Updated NetworkManager-wifi-1:1.18.0-5.el7_7.1.x86_64                 @updates
    Update                      1:1.18.0-5.el7_7.2.x86_64                 @updates
    Updated NetworkManager-wwan-1:1.18.0-5.el7_7.1.x86_64                 @updates
    Update                      1:1.18.0-5.el7_7.2.x86_64                 @updates
    Updated binutils-2.27-41.base.el7_7.1.x86_64                          @updates
    Update           2.27-41.base.el7_7.2.x86_64                          @updates
    Updated bpftool-3.10.0-1062.9.1.el7.x86_64                            @updates
    Update          3.10.0-1062.12.1.el7.x86_64                           @updates
    Updated clamav-0.101.5-1.el7.x86_64                                   @epel-testing
    Update         0.101.5-10.el7.x86_64                                  @epel
    Updated clamav-data-0.101.5-1.el7.noarch                              @epel-testing
    Update              0.101.5-10.el7.noarch                             @epel
    Updated clamav-devel-0.101.5-1.el7.x86_64                             @epel-testing
    Update               0.101.5-10.el7.x86_64                            @epel
    Updated clamav-filesystem-0.101.5-1.el7.noarch                        @epel-testing
    Update                    0.101.5-10.el7.noarch                       @epel
    Updated clamav-lib-0.101.5-1.el7.x86_64                               @epel-testing
    Update             0.101.5-10.el7.x86_64                              @epel
    Updated clamav-update-0.101.5-1.el7.x86_64                            @epel-testing
    Update                0.101.5-10.el7.x86_64                           @epel
    Updated clamd-0.101.5-1.el7.x86_64                                    @epel-testing
    Update        0.101.5-10.el7.x86_64                                   @epel
    Updated cups-filters-1.0.35-26.el7.x86_64                             @base
    Update               1.0.35-26.el7_7.1.x86_64                         @updates
    Updated cups-filters-libs-1.0.35-26.el7.x86_64                        @base
    Update                    1.0.35-26.el7_7.1.x86_64                    @updates
    Updated curl-7.29.0-54.el7_7.1.x86_64                                 @updates
    Update       7.29.0-54.el7_7.2.x86_64                                 @updates
    Updated docker-ce-3:19.03.5-3.el7.x86_64                              @docker-ce-stable
    Update            3:19.03.6-3.el7.x86_64                              @docker-ce-stable
    Updated docker-ce-cli-1:19.03.5-3.el7.x86_64                          @docker-ce-stable
    Update                1:19.03.6-3.el7.x86_64                          @docker-ce-stable
    Updated firefox-68.4.1-1.el7.centos.x86_64                            @updates
    Update          68.5.0-2.el7.centos.x86_64                            @updates
    Updated firewall-config-0.6.3-2.el7_7.2.noarch                        @updates
    Update                  0.6.3-2.el7_7.3.noarch                        @updates
    Updated firewalld-0.6.3-2.el7_7.2.noarch                              @updates
    Update            0.6.3-2.el7_7.3.noarch                              @updates
    Updated firewalld-filesystem-0.6.3-2.el7_7.2.noarch                   @updates
    Update                       0.6.3-2.el7_7.3.noarch                   @updates
    Updated flash-plugin-32.0.0.314-release.x86_64                        @adobe-linux-x86_64
    Update               32.0.0.330-release.x86_64                        @adobe-linux-x86_64
    Updated gnome-shell-3.28.3-13.el7_7.x86_64                            @updates
    Update              3.28.3-14.el7_7.x86_64                            @updates
    Updated google-chrome-stable-79.0.3945.130-1.x86_64                   @google-chrome
    Update                       80.0.3987.122-1.x86_64                   @google-chrome
    Updated ipa-client-4.6.5-11.el7.centos.3.x86_64                       @updates
    Update             4.6.5-11.el7.centos.4.x86_64                       @updates
    Updated ipa-client-common-4.6.5-11.el7.centos.3.noarch                @updates
    Update                    4.6.5-11.el7.centos.4.noarch                @updates
    Updated ipa-common-4.6.5-11.el7.centos.3.noarch                       @updates
    Update             4.6.5-11.el7.centos.4.noarch                       @updates
    Updated iprutils-2.4.17.1-2.el7.x86_64                                @base
    Update           2.4.17.1-3.el7_7.x86_64                              @updates
    Updated java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7.x86_64          @updates
    Update                     1:1.7.0.251-2.6.21.0.el7_7.x86_64          @updates
    Updated java-1.7.0-openjdk-headless-1:1.7.0.241-2.6.20.0.el7_7.x86_64 @updates
    Update                              1:1.7.0.251-2.6.21.0.el7_7.x86_64 @updates
    Updated java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7.x86_64             @updates
    Update                     1:1.8.0.242.b08-0.el7_7.x86_64             @updates
    Updated java-1.8.0-openjdk-headless-1:1.8.0.232.b09-0.el7_7.x86_64    @updates
    Update                              1:1.8.0.242.b08-0.el7_7.x86_64    @updates
    Erase   kernel-3.10.0-957.27.2.el7.x86_64                             @updates
    Install kernel-3.10.0-1062.12.1.el7.x86_64                            @updates
    Updated kernel-debug-devel-3.10.0-1062.9.1.el7.x86_64                 @updates
    Update                     3.10.0-1062.12.1.el7.x86_64                @updates
    Updated kernel-headers-3.10.0-1062.9.1.el7.x86_64                     @updates
    Update                 3.10.0-1062.12.1.el7.x86_64                    @updates
    Updated kernel-tools-3.10.0-1062.9.1.el7.x86_64                       @updates
    Update               3.10.0-1062.12.1.el7.x86_64                      @updates
    Updated kernel-tools-libs-3.10.0-1062.9.1.el7.x86_64                  @updates
    Update                    3.10.0-1062.12.1.el7.x86_64                 @updates
    Updated libarchive-3.1.2-12.el7.x86_64                                @base
    Update             3.1.2-14.el7_7.x86_64                              @updates
    Updated libcurl-7.29.0-54.el7_7.1.x86_64                              @updates
    Update          7.29.0-54.el7_7.2.x86_64                              @updates
    Updated libgudev1-219-67.el7_7.2.x86_64                               @updates
    Update            219-67.el7_7.3.x86_64                               @updates
    Updated libvirt-daemon-4.5.0-23.el7_7.3.x86_64                        @updates
    Update                 4.5.0-23.el7_7.5.x86_64                        @updates
    Updated libvirt-daemon-config-network-4.5.0-23.el7_7.3.x86_64         @updates
    Update                                4.5.0-23.el7_7.5.x86_64         @updates
    Updated libvirt-daemon-driver-interface-4.5.0-23.el7_7.3.x86_64       @updates
    Update                                  4.5.0-23.el7_7.5.x86_64       @updates
    Updated libvirt-daemon-driver-network-4.5.0-23.el7_7.3.x86_64         @updates
    Update                                4.5.0-23.el7_7.5.x86_64         @updates
    Updated libvirt-daemon-driver-nodedev-4.5.0-23.el7_7.3.x86_64         @updates
    Update                                4.5.0-23.el7_7.5.x86_64         @updates
    Updated libvirt-daemon-driver-nwfilter-4.5.0-23.el7_7.3.x86_64        @updates
    Update                                 4.5.0-23.el7_7.5.x86_64        @updates
    Updated libvirt-daemon-driver-qemu-4.5.0-23.el7_7.3.x86_64            @updates
    Update                             4.5.0-23.el7_7.5.x86_64            @updates
    Updated libvirt-daemon-driver-secret-4.5.0-23.el7_7.3.x86_64          @updates
    Update                               4.5.0-23.el7_7.5.x86_64          @updates
    Updated libvirt-daemon-driver-storage-4.5.0-23.el7_7.3.x86_64         @updates
    Update                                4.5.0-23.el7_7.5.x86_64         @updates
    Updated libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.3.x86_64    @updates
    Update                                     4.5.0-23.el7_7.5.x86_64    @updates
    Updated libvirt-daemon-driver-storage-disk-4.5.0-23.el7_7.3.x86_64    @updates
    Update                                     4.5.0-23.el7_7.5.x86_64    @updates
    Updated libvirt-daemon-driver-storage-gluster-4.5.0-23.el7_7.3.x86_64 @updates
    Update                                        4.5.0-23.el7_7.5.x86_64 @updates
    Updated libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7_7.3.x86_64   @updates
    Update                                      4.5.0-23.el7_7.5.x86_64   @updates
    Updated libvirt-daemon-driver-storage-logical-4.5.0-23.el7_7.3.x86_64 @updates
    Update                                        4.5.0-23.el7_7.5.x86_64 @updates
    Updated libvirt-daemon-driver-storage-mpath-4.5.0-23.el7_7.3.x86_64   @updates
    Update                                      4.5.0-23.el7_7.5.x86_64   @updates
    Updated libvirt-daemon-driver-storage-rbd-4.5.0-23.el7_7.3.x86_64     @updates
    Update                                    4.5.0-23.el7_7.5.x86_64     @updates
    Updated libvirt-daemon-driver-storage-scsi-4.5.0-23.el7_7.3.x86_64    @updates
    Update                                     4.5.0-23.el7_7.5.x86_64    @updates
    Updated libvirt-daemon-kvm-4.5.0-23.el7_7.3.x86_64                    @updates
    Update                     4.5.0-23.el7_7.5.x86_64                    @updates
    Updated libvirt-libs-4.5.0-23.el7_7.3.x86_64                          @updates
    Update               4.5.0-23.el7_7.5.x86_64                          @updates
    Updated mate-themes-3.22.19-2.el7.noarch                              @epel
    Update              3.22.21-1.el7.noarch                              @epel-testing
    Updated mesa-dri-drivers-18.3.4-5.el7.x86_64                          @base
    Update                   18.3.4-6.el7_7.x86_64                        @updates
    Updated mesa-filesystem-18.3.4-5.el7.x86_64                           @base
    Update                  18.3.4-6.el7_7.x86_64                         @updates
    Updated mesa-khr-devel-18.3.4-5.el7.x86_64                            @base
    Update                 18.3.4-6.el7_7.x86_64                          @updates
    Updated mesa-libEGL-18.3.4-5.el7.x86_64                               @base
    Update              18.3.4-6.el7_7.x86_64                             @updates
    Updated mesa-libEGL-devel-18.3.4-5.el7.x86_64                         @base
    Update                    18.3.4-6.el7_7.x86_64                       @updates
    Updated mesa-libGL-18.3.4-5.el7.x86_64                                @base
    Update             18.3.4-6.el7_7.x86_64                              @updates
    Updated mesa-libGL-devel-18.3.4-5.el7.x86_64                          @base
    Update                   18.3.4-6.el7_7.x86_64                        @updates
    Updated mesa-libgbm-18.3.4-5.el7.x86_64                               @base
    Update              18.3.4-6.el7_7.x86_64                             @updates
    Updated mesa-libglapi-18.3.4-5.el7.x86_64                             @base
    Update                18.3.4-6.el7_7.x86_64                           @updates
    Updated mesa-libxatracker-18.3.4-5.el7.x86_64                         @base
    Update                    18.3.4-6.el7_7.x86_64                       @updates
    Updated mutter-3.28.3-12.el7_7.x86_64                                 @updates
    Update         3.28.3-14.el7_7.x86_64                                 @updates
    Updated net-snmp-libs-1:5.7.2-43.el7.x86_64                           @base
    Update                1:5.7.2-43.el7_7.3.x86_64                       @updates
    Updated openjpeg2-2.3.1-3.el7.x86_64                                  @epel-testing
    Update            2.3.1-3.el7_7.x86_64                                @updates
    Updated postgresql-jdbc-42.2.9-1.rhel7.noarch                         @pgdg10
    Update                  42.2.10-1.rhel7.noarch                        @pgdg10
    Updated postgresql10-10.11-2PGDG.rhel7.x86_64                         @pgdg10
    Update               10.12-1PGDG.rhel7.x86_64                         @pgdg10
    Updated postgresql10-libs-10.11-2PGDG.rhel7.x86_64                    @pgdg10
    Update                    10.12-1PGDG.rhel7.x86_64                    @pgdg10
    Updated postgresql10-server-10.11-2PGDG.rhel7.x86_64                  @pgdg10
    Update                      10.12-1PGDG.rhel7.x86_64                  @pgdg10
    Updated python-firewall-0.6.3-2.el7_7.2.noarch                        @updates
    Update                  0.6.3-2.el7_7.3.noarch                        @updates
    Updated python-perf-3.10.0-1062.9.1.el7.x86_64                        @updates
    Update              3.10.0-1062.12.1.el7.x86_64                       @updates
    Updated python2-ipaclient-4.6.5-11.el7.centos.3.noarch                @updates
    Update                    4.6.5-11.el7.centos.4.noarch                @updates
    Updated python2-ipalib-4.6.5-11.el7.centos.3.noarch                   @updates
    Update                 4.6.5-11.el7.centos.4.noarch                   @updates
    Updated python34-six-1.11.0-3.el7.noarch                              @epel
    Update               1.12.0-1.el7.noarch                              @epel
    Updated python34-urllib3-1.25.1-1.el7.noarch                          @epel
    Update                   1.25.6-1.el7.noarch                          @epel
    Updated python36-six-1.11.0-3.el7.noarch                              @epel
    Update               1.12.0-1.el7.noarch                              @epel
    Updated python36-urllib3-1.25.1-1.el7.noarch                          @epel
    Update                   1.25.6-1.el7.noarch                          @epel
    Updated qemu-img-10:1.5.3-167.el7_7.1.x86_64                          @updates
    Update           10:1.5.3-167.el7_7.4.x86_64                          @updates
    Updated qemu-kvm-10:1.5.3-167.el7_7.1.x86_64                          @updates
    Update           10:1.5.3-167.el7_7.4.x86_64                          @updates
    Updated qemu-kvm-common-10:1.5.3-167.el7_7.1.x86_64                   @updates
    Update                  10:1.5.3-167.el7_7.4.x86_64                   @updates
    Updated sg3_utils-1.37-18.el7_7.1.x86_64                              @updates
    Update            1.37-18.el7_7.2.x86_64                              @updates
    Updated sg3_utils-libs-1.37-18.el7_7.1.x86_64                         @updates
    Update                 1.37-18.el7_7.2.x86_64                         @updates
    Updated smartmontools-1:7.0-1.el7.x86_64                              @base
    Update                1:7.0-1.el7_7.1.x86_64                          @updates
    Updated sqlite-3.7.17-8.el7.x86_64                                    @anaconda
    Update         3.7.17-8.el7_7.1.x86_64                                @updates
    Updated sudo-1.8.23-4.el7_7.1.x86_64                                  @updates
    Update       1.8.23-4.el7_7.2.x86_64                                  @updates
    Updated systemd-219-67.el7_7.2.x86_64                                 @updates
    Update          219-67.el7_7.3.x86_64                                 @updates
    Updated systemd-libs-219-67.el7_7.2.x86_64                            @updates
    Update               219-67.el7_7.3.x86_64                            @updates
    Updated systemd-python-219-67.el7_7.2.x86_64                          @updates
    Update                 219-67.el7_7.3.x86_64                          @updates
    Updated systemd-sysv-219-67.el7_7.2.x86_64                            @updates
    Update               219-67.el7_7.3.x86_64                            @updates
    Updated xorg-x11-drv-ati-19.0.1-2.el7.x86_64                          @base
    Update                   19.0.1-3.el7_7.x86_64                        @updates
Scriptlet output:
   1 warning: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-
0.el7_7.x86_64/jre/lib/security/java.security created as /usr/lib/jvm/java-1.8.0-openjdk-
1.8.0.242.b08-0.el7_7.x86_64/jre/lib/security/java.security.rpmnew
   2 restored /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-
0.el7_7.x86_64/jre/lib/security/java.security.rpmnew to /usr/lib/jvm/java-1.8.0-openjdk-
1.8.0.242.b08-0.el7_7.x86_64/jre/lib/security/java.security
   3 Redirecting to /bin/systemctl start atd.service

$ sudo yum history info 56
    Updated ntam-ca-trust-0.7-1.el7.noarch    @/ntam-ca-trust-0.7-1.el7.noarch
    Update                2019.2-1.el7.noarch @/ntam-ca-trust-2019.2-1.el7.noarch


Thanks for any help,
-Randall



_______________________________________________
openconnect-devel mailing list
openconnect-devel@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/openconnect-devel



[Index of Archives]     [Linux Samsung SoC]     [Linux Rockchip SoC]     [Linux Actions SoC]     [Linux for Synopsys ARC Processors]     [Linux NFS]     [Linux NILFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]


  Powered by Linux