Hello and greetings,
I'm running tomcat 9.0.27 using APR and OpenSSL and get intermittent crashes
with the hs_err log always pointing that the problematic frame is libapr-1.so.
Our machine details:
OS: CentOS Linux release 7.6.1810 (Core)
Java: OpenJDK 64-Bit Server VM (build 25.191-b12, mixed mode)
APR based Apache Tomcat Native library [1.2.23] using APR version [1.4.8]
OpenSSL 1.0.2k-fips
On startup, I don't see any errors on APR/OpenSSL
22-Jan-2020 20:29:14.188 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded APR based
Apache Tomcat Native library [1.2.23] using APR version [1.4.8].
22-Jan-2020 20:29:14.188 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities:
IPv6 [true], sendfile [true], accept filters [false], random [true].
22-Jan-2020 20:29:14.188 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL
configuration: useAprConnector [true], useOpenSSL [true]
22-Jan-2020 20:29:14.190 INFO [main]
org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL
successfully initialized [OpenSSL 1.0.2k-fips 26 Jan 2017]
22-Jan-2020 20:29:14.374 INFO [main]
org.apache.coyote.http11.AbstractHttp11Protocol.configureUpgradeProtocol The
["https-openssl-apr-443"] connector has been configured to support negotiation
to [h2] via ALPN
And our connector configuration
<Connector port="443"
protocol="org.apache.coyote.http11.Http11AprProtocol" maxThreads="150"
SSLEnabled="true" scheme="https" secure="true"
defaultSSLHostConfigName="redacted">
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol"/>
<SSLHostConfig hostName="redacted">
<Certificate certificateKeyFile="our.key"
certificateFile="our.crt"
certificateChainFile="our.ca-bundle"
certificateKeyPassword="ourPSK type="RSA"/>
</SSLHostConfig>
Has anyone experienced the same issue? The issue is hard to reproduce but we
get at least one crash a month.
Warm regards,
Norbert Elbanbuena
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
