-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi.

FreeBSD 5.1-p10 (and also possible other 5.1-pX version) can be remotely
locked up if the following criteria is met:

+ apache2 has mod_ssl loaded and enabled
+ apache2 has the following configuration directives set to the
following values:

        SSLMutex sem
        SSLSessionCache shm:/some/file(1048576)

+ client connects via SSL/TLS to apache fast enough.

If all conditions above are satisfied except the last one, then lockup
doesn't happen.

I tested on three 5.1-p10 machines (SMP, uniprocessor, uniprocessor with
hypterthreading) with JMeter 1.9.1.

It is possible lockup machine with 100 requests (1 concurrent request)
in 1-3 seconds.

If SSLMutex is set to file:/path/somewhere and SSLSessionCache is set to
dbm:/some/dbm lockup does not accour.

Linux 2.4.22 is not affected by this issue.

Details:

apache: 2.0.47
php: 4.3.3 + turck mmcache 2.4.2
web application: horde imp webmail

Best regards, Brane
-----BEGIN PGP SIGNATURE-----

iD8DBQE/n5iEfiC/E+t8hPcRAu9kAJ4lpD5CJf7HwYxphipHin0gUFaORACfV6ei
Wxi5PvScjACrKmCxCEbt0l0=
=UVfz
-----END PGP SIGNATURE-----

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to