Am 2020-08-24 um 15:42 schrieb Mark Thomas:


On 24/08/2020 12:58, Michael Osipov wrote:
Am 2020-08-21 um 20:22 schrieb Mark Thomas:
Version 1.2.25 includes the following changes compared to 1.2.24

- Improvements to LibreSSL support

- Improvements to HP_UX support

Various other fixes and improvements. See the changelog for details.

The proposed release artefacts can be found at [1],
and the build was done using tag [2].

A bit late, but here are my findings. I am not sure whether they are in
Tomcat or libtcnative.

I see reliable failures in tests with LibreSSL 2.9.0 and 3.2.1 (master)
with libtcnative master and Tomcat master on FreeBSD 12-STABLE and
OpenJDK 1.8.0_265.

Is that any different with 1.2.24?

FWIW, I have tried now 2.9.x, 3.0.x, 3.1.x and 3.2.x (master). All of them crash (JVM crash) TEST-org.apache.tomcat.util.net.TestSSLHostConfigCompat.*.txt. It must be a general problem somewhere.

    frame #10: 0x0000000a6e3df807 
libtcnative-1.so.0.2.24`Java_org_apache_tomcat_jni_SSLContext_setCertificateRaw(e=0x00000008054421e0,
 o=<unavailable>, ctx=44874834080, javaCert=<unavailable>, 
javaKey=<unavailable>, idx=0) at sslcontext.c:1192:9
    frame #11: 0x0000000805618587
as well as
Stack: [0x00007fffdfefe000,0x00007fffdfffe000],  sp=0x00007fffdfffb7c0,  free 
space=1013k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  [libssl.so.48+0x42b59]  SSL_CTX_use_certificate+0x9
C  [libtcnative-1.so.0.2.24+0x24807]  
Java_org_apache_tomcat_jni_SSLContext_setCertificateRaw+0x1d7
j  org.apache.tomcat.jni.SSLContext.setCertificateRaw(J[B[BI)Z+0
j  
org.apache.tomcat.util.net.openssl.OpenSSLContext.addCertificate(Lorg/apache/tomcat/util/net/SSLHostConfigCertificate;)V+214
j  
org.apache.tomcat.util.net.AprEndpoint.createSSLContext(Lorg/apache/tomcat/util/net/SSLHostConfig;)V+146
j  org.apache.tomcat.util.net.AprEndpoint.bind()V+461
j  org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup()V+1

M

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to