Hi Peter. > works fine for me - no leaks - but then I'm not using Solaris 2.5.1 - > thats a bit old isnt it, I'm using chil on sol2.6 sol7 and sol8 ok
Thanks for answering Götz' question. After some more testing we observed the (mis-)behaviour on Solaris 8 too. If I understand you correctly you are using Apache 1.3.26, mod_ssl (I guess you are using 2.8.10), openssl and an nCipher-Box with libnfhwchrk.so. Are you using the engine-branch of openssl, right out of the box, without any modifications? Which version of libnfhwchrk.so do you have? Which size does the library have? We are currently trying to get the libnfhwchrk.so stuff to work with OpenSSL engine 0.9.6g, but after some thousand SSL-Connects the ncipher box is blocked and we see error messages like "nFast KM: error: Module #1: LoadBlob (BlobPubKNSO) failed: NoMemory" followed by something awful from OpenSSL. Of course we are trying to resolve the issue with nCipher, but in the meantime it would be nice to here from someone who succeeded with this setup (mod_ssl, engine-branch, libnfhwchrk.so). Regards, Jürgen > > Götz Babin-Ebell wrote: > > > Hello folks, > > > > There seems to be a ressource leak in the chil engine: > > > > Afer running 6 hours, apache stops to accept SSL requests: > > > > > [Mon Aug 26 20:41:02 2002] [error] OpenSSL: error:26089076:engine > > > routines:HWCRHK_MOD_EXP:request fallback > > > [Mon Aug 26 20:41:02 2002] [error] OpenSSL: error:0D079006:asn1 > > encoding > > > routines:ASN1_verify:bad get asn1 object call > > > > > > ... > > > > > > [Mon Aug 26 20:42:02 2002] [error] OpenSSL: error:2608B072:engine > > > routines:HWCRHK_RAND_BYTES:request failed > > > > The program /opt/nfast/bin/randchk" gave the following error: > > > Initialising 6-bit Universal Statistical Test > > > Processing... > > > Error in reply: cmd was ErrorReturn, status was NoMemory > > > > After restareting apache the server processed normal. > > > > System information: > > > > Solaris 2.5.1 > > OpenSSL 0.9.6g > > ModSSL ??? > > Apache 1.3.26 > > > > > > Any guesses ? > > > > Bye > > > > Goetz > > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > -- > Juergen Brauckmann Tel.: +49 (0)40 / 80 80 26-3 11 > TC TrustCenter AG Fax.: +49 (0)40 / 80 80 26-1 26 > Sonninstraße 24-28 mailto:[EMAIL PROTECTED] > D-20097 Hamburg http://www.trustcenter.de ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
