https://issues.apache.org/bugzilla/show_bug.cgi?id=56091

            Bug ID: 56091
           Summary: SSL handshake error when httpd compiled on Oracle T4
                    system
           Product: Apache httpd-2
           Version: 2.2.26
          Hardware: Sun
                OS: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: [email protected]
          Reporter: [email protected]

Compiling httpd v2.2.x (have tried 2.2.11, 2.2.22 and 2.2.26) on an Oracle T4
we get an occational SSL error in a seemingly random fashion.

I have tried a couple of different versions of openssl as well.

If I compile on an Oracle SPARC V445 and then copy mod_ssl.so into the install
compiled on the T4 the the error does not occur.

The differences in the source tree after running the same configure on both
machines are minor. Consisting of

1) config.log and config.status files 
2) HAVE_FDATASYNC is set to 1 in srclib/apr/include/arch/unix/apr_private.h on
the T4 compile
3) A minor difference in srclib/apr-util/include/apu.h,
srclib/apr-util/include/private/apu_config.h and srclib/apr-util/Makefile
because an sqlite3 compatible library is on one of the machines and not the
other.

gcc version used v3.4.6 (without GNU binutils)
openssl versions tried 0.9.8 and 1.0.0
OS: Solaris 10

>From the error log we do not usually get any entries at all. In testing we
sometimes get the following line, but there is no evidence it is related.

"[warn] (45)Deadlock situation detected/avoided: Failed to acquire SSL session
cache lock"

It is possible the error occurs more often during higher load, as it happenes
very rarely under low load, but this eveluation is more than a little
subjective at the moment.

The SSL error as seen in the browser is:

"An error occurred during a connection to sp.onlinelibrary.wiley.com. SSL
received an unexpected New Session Ticket handshake message. (Error code:
ssl_error_rx_unexpected_new_session_ticket)

 The page you are trying to view cannot be shown because the authenticity of
the received data could not be verified.
  Please contact the web site owners to inform them of this problem.
Alternatively, use the command found in the help menu to report this broken
site."

I realise this may not be an apache httpd problem, but I have to start
somewhere.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to