This happens when trying to connect to Pound (loglevel 5) using HTTPS
with Tor Browser (Firefox) which results in a Network Protocol Error in
Tor Browser:
7FB314965700 loop done /root/Pound-3.0.1/src/http.c:471
7FB314965700 start loop /root/Pound-3.0.1/src/http.c:259
7FB314164700 peer address 185.31.175.243 /root/Pound-3.0.1/src/http.c:549
7FB314164700 start sni /root/Pound-3.0.1/src/util.c:157
7FB314164700 sni for nc.emanuel-loos.eu /root/Pound-3.0.1/src/util.c:165
7FB314164700: found match at 0 /root/Pound-3.0.1/src/util.c:169
7FB314164700 handshake OK /root/Pound-3.0.1/src/http.c:572
7FB314164700 start do_request /root/Pound-3.0.1/src/http.c:257
7FB314164700 start loop /root/Pound-3.0.1/src/http.c:259
7FB314164700 request PRI * HTTP/2.0
/root/Pound-3.0.1/src/http.c:283
7FB314164700 preamble 1 ->
/root/Pound-3.0.1/src/http.c:301
7FB314164700 preamble 2 -> SM
/root/Pound-3.0.1/src/http.c:301
7FB314164700 preamble 3 ->
/root/Pound-3.0.1/src/http.c:301
7FB314164700 start do_http2 /root/Pound-3.0.1/src/http2.c:296
7FB314164700 ignored settings 2/0 /root/Pound-3.0.1/src/http2.c:314
7FB314164700 ignored settings 4/131072 /root/Pound-3.0.1/src/http2.c:314
7FB314164700 TABSIZE 65536 FRAMESIZE 16384 MAXSTREAMS 0
/root/Pound-3.0.1/src/http2.c:317
7FB314164700 sent my SETTINGS /root/Pound-3.0.1/src/http2.c:340
7FB314164700 ACK SETTINGS /root/Pound-3.0.1/src/http2.c:348
7FB314164700 received WINUPD 0 /root/Pound-3.0.1/src/http2.c:659
7FB314164700 received PRIORITY 3 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 3 stream 0 weight 200
/root/Pound-3.0.1/src/http2.c:654
7FB314164700 received PRIORITY 5 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 5 stream 0 weight 100
/root/Pound-3.0.1/src/http2.c:654
7FB314164700 received PRIORITY 7 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 7 stream 0 weight 0 /root/Pound-3.0.1/src/http2.c:654
7FB314164700 received PRIORITY 9 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 9 stream 7 weight 0 /root/Pound-3.0.1/src/http2.c:654
7FB314164700 received PRIORITY 11 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 11 stream 3 weight 0 /root/Pound-3.0.1/src/http2.c:654
7FB314164700 received PRIORITY 13 length 5 /root/Pound-3.0.1/src/http2.c:647
7FB314164700 PRIORITY 13 stream 0 weight 240
/root/Pound-3.0.1/src/http2.c:654
7FB314164700 received HEADER 15 length 206 flags 25
/root/Pound-3.0.1/src/http2.c:389
7FB314164700 added 15 to active /root/Pound-3.0.1/src/http2.c:218
7FB314164700 15 depends on 13 /root/Pound-3.0.1/src/http2.c:425
7FB314164700 length 206 v1 0 v2 5 /root/Pound-3.0.1/src/http2.c:430
7FB314164700 start get_be /root/Pound-3.0.1/src/http.c:143
7FB314164700 get_be HTTP/2 /root/Pound-3.0.1/src/http.c:164
7FB314164700 check 0 header Host: nc.emanuel-loos.eu
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header user-agent: Mozilla/5.0 (Windows NT 10.0;
rv:78.0) Gecko/20100101 Firefox/78.0
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header accept-language: en-US,en;q=0.5
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header accept-encoding: gzip, deflate, br
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header upgrade-insecure-requests: 1
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 0 header te: trailers
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header Host: nc.emanuel-loos.eu
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header user-agent: Mozilla/5.0 (Windows NT 10.0;
rv:78.0) Gecko/20100101 Firefox/78.0
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header accept-language: en-US,en;q=0.5
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header accept-encoding: gzip, deflate, br
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header upgrade-insecure-requests: 1
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 1 header te: trailers
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header Host: nc.emanuel-loos.eu
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header user-agent: Mozilla/5.0 (Windows NT 10.0;
rv:78.0) Gecko/20100101 Firefox/78.0
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header accept-language: en-US,en;q=0.5
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header accept-encoding: gzip, deflate, br
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header upgrade-insecure-requests: 1
/root/Pound-3.0.1/src/http.c:179
7FB314164700 check 2 header te: trailers
/root/Pound-3.0.1/src/http.c:179
7FB314164700 found 2 /root/Pound-3.0.1/src/http.c:199
7FB31896D700 Null session returns 0 /root/Pound-3.0.1/src/http.c:70
7FB31896D700 Null session: /root/Pound-3.0.1/src/http.c:52
7FB314164700 done get_be /root/Pound-3.0.1/src/http.c:228
7FB32898D700 http_ver 2 /root/Pound-3.0.1/src/backend.c:575
7FB32898D700 client_addr:185.31.175.243 /root/Pound-3.0.1/src/backend.c:585
7FB32898D700 start backend_2 /root/Pound-3.0.1/src/backend.c:213
7FB32898D700 FRAMESIZE 16384, TABSIZE 65536
/root/Pound-3.0.1/src/backend.c:235
7FB32898D700 GET /index.php/login HTTP/1.1
/root/Pound-3.0.1/src/backend.c:254
7FB32898D700 host: nc.emanuel-loos.eu /root/Pound-3.0.1/src/backend.c:256
7FB32898D700 user-agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0)
Gecko/20100101 Firefox/78.0 /root/Pound-3.0.1/src/backend.c:266
7FB32898D700 accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
/root/Pound-3.0.1/src/backend.c:266
7FB32898D700 accept-language: en-US,en;q=0.5
/root/Pound-3.0.1/src/backend.c:266
7FB32898D700 accept-encoding: gzip, deflate, br
/root/Pound-3.0.1/src/backend.c:266
7FB32898D700 upgrade-insecure-requests: 1
/root/Pound-3.0.1/src/backend.c:266
7FB32898D700 te: trailers, chunked /root/Pound-3.0.1/src/backend.c:262
7FB32898D700 ---end of headers--- /root/Pound-3.0.1/src/backend.c:274
7FB32898D700 ---end of content--- /root/Pound-3.0.1/src/backend.c:284
7FB32898D700 no trailing headers /root/Pound-3.0.1/src/backend.c:294
7FB32898D700 ---end of trailing headers ---
/root/Pound-3.0.1/src/backend.c:298
7FB32898D700 read HTTP/1.1 200 OK
/root/Pound-3.0.1/src/backend.c:316
7FB32898D700 reply code 200 /root/Pound-3.0.1/src/backend.c:319
7FB32898D700 reply header :status 200 /root/Pound-3.0.1/src/backend.c:323
7FB32898D700 header Date => Date: Tue, 07 Sep 2021 09:43:05 GMT
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Server => Server: Apache/2.4.48 (Debian)
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Referrer-Policy => Referrer-Policy: no-referrer
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-Content-Type-Options => X-Content-Type-Options:
nosniff /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-Download-Options => X-Download-Options: noopen
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-Frame-Options => X-Frame-Options: SAMEORIGIN
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-Permitted-Cross-Domain-Policies =>
X-Permitted-Cross-Domain-Policies: none /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-Robots-Tag => X-Robots-Tag: none
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header X-XSS-Protection => X-XSS-Protection: 1; mode=block
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Set-Cookie => Set-Cookie:
ochra5la4sfp=g8atufsmvlesjlanfajakoqtkg; path=/; HttpOnly; SameSite=Lax
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Expires => Expires: Thu, 19 Nov 1981 08:52:00 GMT
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Cache-Control => Cache-Control: no-cache, no-store,
must-revalidate /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Pragma => Pragma: no-cache
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Set-Cookie => Set-Cookie:
oc_sessionPassphrase=hgMo63GuiCBMi9zfMW6pr%2F9QjQrjDSXZFZZY6O49YKYm4vxTLfHXrMpi%2B1YObqNLcvNc7tATuHDU27tAKgRzHZuDrdULfEmTTQT9MSHdema0MY5IPB8%2B%2BaUmVtc%2FalrP;
path=/; HttpOnly; SameSite=Lax /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Set-Cookie => Set-Cookie:
ochra5la4sfp=4jaagh94c5l1sr9i37uco7qo4j; path=/; HttpOnly; SameSite=Lax
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Content-Security-Policy => Content-Security-Policy:
default-src 'none';base-uri 'none';manifest-src 'self';script-src
'nonce-Rm9UNDMydWpDazBNVVJHbWNIK0ZqdUxkQVRyRkt3RGZXd3hmNmFIZU9NZz06ZU5hM216N0pYSFZwUG1HVEpoN3J6NEN0T1U2QmVuWHBGRWNLamZHZmZybz0='
blob:;style-src 'self' 'unsafe-inline';img-src 'self' data: blob: *
https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src
'self' blob: turn.emanuel-loos.eu:3478 stun.nextcloud.com:443
turn.emanuel-loos.eu:5349;media-src 'self' blob:;frame-src prezi.com
player.vimeo.com vine.co www.youtube.com 'self';child-src blob:
'self';frame-ancestors 'self';worker-src 'self' blob:;form-action 'self'
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Set-Cookie => Set-Cookie: nc_sameSiteCookielax=true;
path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Set-Cookie => Set-Cookie:
nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100
23:59:59 GMT; SameSite=strict /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Content-Encoding => Content-Encoding: gzip
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Feature-Policy => Feature-Policy: autoplay
'self';camera 'self';fullscreen 'self';geolocation 'self';microphone
'self';payment 'none' /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Onion-Location => Onion-Location:
http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion
/root/Pound-3.0.1/src/backend.c:363
7FB32898D700 header Content-Type => Content-Type: text/html;
charset=UTF-8 /root/Pound-3.0.1/src/backend.c:363
7FB32898D700 no_content 0, is_chunked 0, content_length 7058
/root/Pound-3.0.1/src/backend.c:385
7FB32898D700 read 7058 /root/Pound-3.0.1/src/backend.c:422
7FB32898D700 sent end-of-content /root/Pound-3.0.1/src/backend.c:436
7FB32898D700 have trailer HTTP/1.1 400 Bad Request
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 trailer HTTP/1.1 400 Bad Request
=> HTTP/1.1 400 Bad Request
: /root/Pound-3.0.1/src/backend.c:453
7FB32898D700 have trailer Date: Tue, 07 Sep 2021 09:43:06 GMT
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 trailer Date => Date: Tue, 07 Sep 2021 09:43:06 GMT
/root/Pound-3.0.1/src/backend.c:453
7FB32898D700 have trailer Server: Apache/2.4.48 (Debian)
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 trailer Server => Server: Apache/2.4.48 (Debian)
/root/Pound-3.0.1/src/backend.c:453
7FB32898D700 have trailer Content-Length: 354
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 have trailer Connection: close
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 have trailer Content-Type: text/html; charset=iso-8859-1
/root/Pound-3.0.1/src/backend.c:442
7FB32898D700 trailer Content-Type => Content-Type: text/html;
charset=iso-8859-1 /root/Pound-3.0.1/src/backend.c:453
7FB314164700 write 15:HEADER -> 1345 /root/Pound-3.0.1/src/http2.c:680
7FB32898D700 sent end-of-trailers /root/Pound-3.0.1/src/backend.c:475
7FB314164700 write 15 -> end-headers /root/Pound-3.0.1/src/http2.c:687
7FB314164700 write 15:DATA -> 7058 /root/Pound-3.0.1/src/http2.c:695
7FB314164700 write trailer 15:HEADER -> 77 /root/Pound-3.0.1/src/http2.c:704
7FB314164700 write trailer 15 -> end-headers
/root/Pound-3.0.1/src/http2.c:711
185.31.175.243 - - [Tue Sep 7 11:43:06 2021] "GET /index.php/login
HTTP/1.1" 200 8992
Thanks in advance!
Emanuel Loos
Am 26.08.21 um 21:56 schrieb Emanuel Loos via pound:
Hello, I compiled the new release 3.0.1 from source and tested if it
fixes my issue but it didn't. The errors in Firefox and Chromium are
still the same. I think it has something to do with TLS since HTTP
works but HTTPS doesn't. I am using a certificate from "Let's Encrypt"
obtained via certbot. I copied fullchain and private key in one file
(like I did for Hiawatha) and specified it as certificate in my Pound
config. Is this the right way?
Thanks in advance!
Emanuel Loos
Am 20.08.21 um 18:15 schrieb Todd Fleisher via pound:
I haven’t really messed with Pound v3 at all, but tried to test this
out using your configuration (adapted for IP & hostname), a basic
apache2 listener on port 80 with no Nextcloud or anything fancy, & a
self-signed SSL certificate and it segfaults for me pretty much
immediately on Ubuntu 18.04 LTS with Pound compiled by hand when it
receives a curl request. Maybe this output will help Robert or
someone else in debugging:
debug option 5 /home/ubuntu/Pound-3.0/src/config.c:632
start get_others /home/ubuntu/Pound-3.0/src/config.c:564
start get_global /home/ubuntu/Pound-3.0/src/config.c:74
user 0 /home/ubuntu/Pound-3.0/src/config.c:80
group 0 /home/ubuntu/Pound-3.0/src/config.c:85
start get_backends /home/ubuntu/Pound-3.0/src/config.c:123
addr 127.0.0.1 /home/ubuntu/Pound-3.0/src/config.c:139
port 80 /home/ubuntu/Pound-3.0/src/config.c:142
push /home/ubuntu/Pound-3.0/src/config.c:168
start get_https /home/ubuntu/Pound-3.0/src/config.c:489
address 192.168.64.6 /home/ubuntu/Pound-3.0/src/config.c:510
port 443 /home/ubuntu/Pound-3.0/src/config.c:513
start get_services /home/ubuntu/Pound-3.0/src/config.c:209
HeadRequire Host: above-puma.local
/home/ubuntu/Pound-3.0/src/config.c:237
push /home/ubuntu/Pound-3.0/src/config.c:258
start get_certificates /home/ubuntu/Pound-3.0/src/config.c:451
start get_one(/etc/pound/bundle.pem)
/home/ubuntu/Pound-3.0/src/config.c:376
get_one add pattern above-puma.local
/home/ubuntu/Pound-3.0/src/config.c:403
get_one: added 1 patterns /home/ubuntu/Pound-3.0/src/config.c:436
client 60 /home/ubuntu/Pound-3.0/src/config.c:516
start get_ciphers /home/ubuntu/Pound-3.0/src/config.c:334
cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-CAMELLIA-128-CBC-SHA
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-AES-128-CCM
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-AES-256-GCM-SHA384
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-RC4-128-MD5
/home/ubuntu/Pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-3DES-EDE-CBC-SHA
/home/ubuntu/Pound-3.0/src/config.c:346
push /home/ubuntu/Pound-3.0/src/config.c:552
Prepare backends /home/ubuntu/Pound-3.0/src/pound.c:153
Prepare listeners /home/ubuntu/Pound-3.0/src/pound.c:185
Prepare services for listener 0
/home/ubuntu/Pound-3.0/src/pound.c:188
7F8DB8DDE700 start service /home/ubuntu/Pound-3.0/src/http.c:45
Starting resurrector thread /home/ubuntu/Pound-3.0/src/util.c:80
7F8DB8DDE700 Null session: /home/ubuntu/Pound-3.0/src/http.c:52
7F8DB65D9700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB5DD8700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB5DD8700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB4DD6700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB4DD6700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB55D7700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB55D7700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB65D9700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB6DDA700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB6DDA700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB75DB700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB75DB700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB7DDC700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB7DDC700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB85DD700 thr_http start /home/ubuntu/Pound-3.0/src/http.c:535
7F8DB85DD700 start loop /home/ubuntu/Pound-3.0/src/http.c:539
7F8DB4DD6700 peer address 192.168.64.1
/home/ubuntu/Pound-3.0/src/http.c:549
7F8DB4DD6700 start sni /home/ubuntu/Pound-3.0/src/util.c:157
7F8DB4DD6700 sni for above-puma.local
/home/ubuntu/Pound-3.0/src/util.c:165
Segmentation fault (core dumped)
I actually tried it in a devuan chimaera VM first to use the same apt
package as you but was running into even stranger behaviors where
pound sometimes claimed it couldn’t bind to IP:https even when
nothing else was listening on port 443. I suspect this is an OS-level
issue regarding cleaning up sockets as it frequently happened when I
tried to restart pound after it crashed and if I waited a while until
the network table was clean of the last TIME_WAIT associated with
port 443 it would start working again.
But even when it would successfully bind it also immediately
segfaulted on the first attempt to connect to it via curl:
root@devuan:/etc/pound# pound -d 5
debug option 5 /build/pound-hSCqfU/pound-3.0/src/config.c:632
start get_others /build/pound-hSCqfU/pound-3.0/src/config.c:564
start get_global /build/pound-hSCqfU/pound-3.0/src/config.c:74
user 0 /build/pound-hSCqfU/pound-3.0/src/config.c:80
group 0 /build/pound-hSCqfU/pound-3.0/src/config.c:85
start get_backends /build/pound-hSCqfU/pound-3.0/src/config.c:123
addr 127.0.0.1 /build/pound-hSCqfU/pound-3.0/src/config.c:139
port 80 /build/pound-hSCqfU/pound-3.0/src/config.c:142
push /build/pound-hSCqfU/pound-3.0/src/config.c:168
start get_https /build/pound-hSCqfU/pound-3.0/src/config.c:489
address 172.16.237.150
/build/pound-hSCqfU/pound-3.0/src/config.c:510
port 443 /build/pound-hSCqfU/pound-3.0/src/config.c:513
start get_services /build/pound-hSCqfU/pound-3.0/src/config.c:209
HeadRequire Host: devuan.local
/build/pound-hSCqfU/pound-3.0/src/config.c:237
push /build/pound-hSCqfU/pound-3.0/src/config.c:258
start get_certificates
/build/pound-hSCqfU/pound-3.0/src/config.c:451
start get_one(/etc/pound/bundle.pem)
/build/pound-hSCqfU/pound-3.0/src/config.c:376
get_one add pattern devuan.local
/build/pound-hSCqfU/pound-3.0/src/config.c:403
get_one: added 1 patterns
/build/pound-hSCqfU/pound-3.0/src/config.c:436
client 60 /build/pound-hSCqfU/pound-3.0/src/config.c:516
start get_ciphers /build/pound-hSCqfU/pound-3.0/src/config.c:334
cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-CAMELLIA-128-CBC-SHA
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-AES-128-CCM
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-AES-256-GCM-SHA384
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-RC4-128-MD5
/build/pound-hSCqfU/pound-3.0/src/config.c:346
cipher TLS-RSA-WITH-3DES-EDE-CBC-SHA
/build/pound-hSCqfU/pound-3.0/src/config.c:346
push /build/pound-hSCqfU/pound-3.0/src/config.c:552
Prepare backends /build/pound-hSCqfU/pound-3.0/src/pound.c:153
Prepare listeners /build/pound-hSCqfU/pound-3.0/src/pound.c:185
Prepare services for listener 0
/build/pound-hSCqfU/pound-3.0/src/pound.c:188
Starting resurrector thread
/build/pound-hSCqfU/pound-3.0/src/util.c:80
7FCDAF89E700 start service
/build/pound-hSCqfU/pound-3.0/src/http.c:45
7FCDAF89E700 Null session:
/build/pound-hSCqfU/pound-3.0/src/http.c:52
7FCDAC898700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAC898700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAC097700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAC097700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAB896700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAB896700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAD099700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAD099700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAD89A700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAD89A700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAE09B700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAE09B700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAE89C700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAE89C700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAF09D700 thr_http start
/build/pound-hSCqfU/pound-3.0/src/http.c:535
7FCDAF09D700 start loop /build/pound-hSCqfU/pound-3.0/src/http.c:539
7FCDAF09D700 peer address 172.16.237.1
/build/pound-hSCqfU/pound-3.0/src/http.c:549
7FCDAF09D700 start sni /build/pound-hSCqfU/pound-3.0/src/util.c:157
7FCDAF09D700 sni for devuan.local
/build/pound-hSCqfU/pound-3.0/src/util.c:165
Segmentation fault
-T
On Aug 19, 2021, at 16:45, Emanuel Loos via pound <pound@apsis.ch
<mailto:pound@apsis.ch>> wrote:
Thank you for the kind words!
Looks like pound really wasn't running when you checked. It should
when and after you receive this email.
Here is what Pound writes when trying to access a page with Firefox:
700 start sni /build/pound-hSCqfU/pound-3.0/src/util.c:157
7FD71E405700 start do_request
/build/pound-hSCqfU/pound-3.0/src/http.c:257
7FD71E405700 start do_http2
/build/pound-hSCqfU/pound-3.0/src/http2.c:296
7FD71E405700 start get_be /build/pound-hSCqfU/pound-3.0/src/http.c:143
7FD724C12700 start backend_2
/build/pound-hSCqfU/pound-3.0/src/backend.c:213
100.64.250.47 - - [Fri Aug 20 01:00:12 2021] "GET /index.php/login
HTTP/1.1" 200 8985
Surprisingly it didn't crash this time. Looks like the crashes where
independent from this and caused due to restarting it to fast.
However, even though Pound says everything goes as it should it
doesn't: Firefox reports a Network Protocol Error (see attached
screenshots). Lynx (a command line webbrowser), however, is able to
access the service without problems. Putting this together with the
error curl gives I have an idea what the issue could be: I think,
since Pound is writing about HTTP1.1 and curl is writing about HTTP2
the HTTP versions might be somehow mixed up or wrongly identified. I
don't know how to check and/or fix this, however.
Emanuel Loos
Am 20.08.21 um 00:01 schrieb Todd Fleisher via pound:
FWIW - right now I can connect to the public IPv4 address for
nc.emanuel-loos.eu <http://nc.emanuel-loos.eu>
<http://nc.emanuel-loos.eu <http://nc.emanuel-loos.eu>>
(185.128.244.57), only the onion service @
http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion/index.php/login
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion/index.php/login>
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion/index.php/login
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion/index.php/login>> is
responding. The public IPv4 address refuses connections.
Assuming the onion service points to the same apache2 backend and
it actually works beyond just loading the login page, this would
seem to point to an issue with your pound instance - maybe it is no
longer running due to a crash or you stopped it deliberately. Once
you verify it is running, you could also try to attach an strace to
pound's PID to see what is happening when you make a request to it
and/or when it is hammering your CPU like you mentioned below.
-T
P.S. Kudos to you for being aware of the power of self-hosting and
trying to learn more about it. It feels like an overlooked concept
with younger generations so it’s refreshing to see sentiments like
yours
On Aug 19, 2021, at 13:34, Emanuel Loos via pound <pound@apsis.ch
<mailto:pound@apsis.ch> <mailto:pound@apsis.ch
<mailto:pound@apsis.ch>>> wrote:
Am 19.08.21 um 21:39 schrieb Emanuel Loos via pound:
If it helps: The backend is an apache2 web server with a lot of
PHP (Nextcloud) and also available on this Tor Onion Service:
http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion>
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion
<http://jlw3fkl2xecpqarvz3qavyl7d7m43j5swxjskofhtdgb6f2cfp2cccid.onion>>
Thanks in advance!
Emanuel Loos
Am 19.08.21 um 21:02 schrieb Emanuel Loos via pound:
-----Original Message-----
From: pound <pound-boun...@apsis.ch
<mailto:pound-boun...@apsis.ch>> On Behalf Of Emanuel Loos via
pound
Sent: Thursday, August 19, 2021 10:34 AM
To: pound@apsis.ch <mailto:pound@apsis.ch>
Cc: Emanuel Loos <m...@mailing-lists.emanuel-loos.eu
<mailto:m...@mailing-lists.emanuel-loos.eu>>
Subject: Re: [pound] PR_END_OF_FILE_ERROR in Firefox and
ERR_CONNECTION refused in Chromium but lynx works
Hello the third time,
just reporting that for some reason Pound just started using
the full CPU power on one core:
PID USER PR NI VIRT RES SHR S %CPU %MEM ZEIT+
BEFEHL
3590 root 20 0 1274244 16664 3144 R 99,3 0,1
37:35.29 pound
it is not a problem for me right now as it is a small private
server doing not much else (except sending this email) right
now but I don't thing that is how it should be. Anyway I think
I'll still keep Pound running (or maybe restart it) for now so
if anyone wants to help me with my problem Pound is online and
the problem can investigated easier.
Thanks in advance!
Emanuel Loos
Am 19.08.21 um 17:00 schrieb Emanuel Loos via pound:
Hello again,
just wanted to add that with curl this happens:
emanuel@devuan-emanuel:~$ curl
https://nc.emanuel-loos.eu/index.php/login
<https://nc.emanuel-loos.eu/index.php/login>
curl: (92) HTTP/2 stream 0 was not closed cleanly:
PROTOCOL_ERROR (err
1)
I left Pound running on my server so as long as there is no crash
(like when trying to connect using Firefox or Chromium but not
lynx or
curl) it should stay online. You are welcome to test it
yourself if it
helps.
Anyone got an idea what the problem could be or how to debug
it further?
Thanks in advance!
Emanuel Loos
--
pound mailing list
pound@apsis.ch <mailto:pound@apsis.ch>
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch
--
pound mailing list
pound@apsis.ch
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch
