SSL renegotiation bug

2004-01-13 Thread Ben Collins-Sussman
Hello, Apache folk. After showing this bug to gstein, iholsman, and others in IRC, I fear I may have found a real bug. It has something to do with SSL, but it's not clear whether this is a bug in the Neon library, OpenSSL, mod_ssl, or httpd itself. Client is: Redhat 9, svn 0.36.0 using neon 0.

Re: SSL renegotiation bug

2004-01-13 Thread Joe Orton
On Tue, Jan 13, 2004 at 04:43:07PM -0600, Ben Collins-Sussman wrote: > > Hello, Apache folk. After showing this bug to gstein, iholsman, and > others in IRC, I fear I may have found a real bug. It has something > to do with SSL, but it's not clear whether this is a bug in the Neon > library, Ope

Re: SSL renegotiation bug

2004-01-14 Thread Ben Collins-Sussman
On Tue, 2004-01-13 at 17:26, Joe Orton wrote: > Is there still a TCP connection between the client and server at this > point? If so, you can identify the server child in question via the > server-status output or "netstat -pt", and strace the process to see > what it's doing. After the hang, 'n

Re: SSL renegotiation bug

2004-01-14 Thread Joe Orton
On Wed, Jan 14, 2004 at 03:27:23PM -0600, Ben Collins-Sussman wrote: > On Tue, 2004-01-13 at 17:26, Joe Orton wrote: > > > Is there still a TCP connection between the client and server at this > > point? If so, you can identify the server child in question via the > > server-status output or "net

Re: SSL renegotiation bug

2004-01-20 Thread Ben Collins-Sussman
Sorry to be so slow in getting back to you, Joe. I'm still desperately looking for a clue on this SSL "hang" that happens when I run 'apachectl graceful'. On Wed, 2004-01-14 at 15:51, Joe Orton wrote: > > The client is hanging on a select() call: > > What's the server doing? Hm, I can't seem t

Re: SSL renegotiation bug

2004-01-21 Thread Joe Orton
On Tue, Jan 20, 2004 at 04:35:34PM -0600, Ben Collins-Sussman wrote: > Sorry to be so slow in getting back to you, Joe. I'm still desperately > looking for a clue on this SSL "hang" that happens when I run 'apachectl > graceful'. > > On Wed, 2004-01-14 at 15:51, Joe Orton wrote: > > > > The clie

Re: SSL renegotiation bug

2004-01-21 Thread Ben Collins-Sussman
On Wed, 2004-01-21 at 04:29, Joe Orton wrote: > > $ sudo strace -p 3850 > > trace: ptrace(PTRACE_SYSCALL, ...): Operation not permitted > > detach: ptrace(PTRACE_DETACH, ...): Operation not permitted > > Ah, add "CoreDumpDirectory /tmp" to your httpd.conf and make sure you're > running the latest

Re: SSL renegotiation bug

2004-01-21 Thread Joe Orton
On Wed, Jan 21, 2004 at 11:12:20AM -0600, Ben Collins-Sussman wrote: > On Wed, 2004-01-21 at 04:29, Joe Orton wrote: > > I have now managed to reproduce hangs a couple of times here, > > What exactly was your reproduction recipe? Same as mine? Start an > import over SSL and then 'graceful' the s

Re: SSL renegotiation bug

2004-01-21 Thread Ben Collins-Sussman
On Wed, 2004-01-21 at 11:26, Joe Orton wrote: > By doing graceful restarts every few seconds during a large import, I > could reproduce a hang using ra_dav both over SSL or over plain HTTP to > a 0.36.0 server running on the localhost, when using DB 4.1.25. I've > upgraded to 4.2.52 and I can no