Package: libapache2-mod-auth-openidc
Version: 2.1.6-1~bpo+1
Severity: important

Dear Maintainer,

This is some kind of a trap : simply enabling the module and performing
a reload (no restart) gives a non-responsive Apache2 server.
I had this first with jessie's 1.6.0-1, then with jessie-backports'
(reporting against the latter).

Steps to reproduce, once the package is installed :

a2enmod auth_openidc
systemctl reload apache2

then the HTTP server becomes unresponsive : accepts connections for a
while but hangs indefinitely, then does not accept connections at all.

The error log displays continuous segmentation faults that I saw only
while rechecking for this report (I had a first version with just
complains about missing directives, which is perhaps another story).

In any case, breaking an Apache2 server with a simple reload should not
happen (I'm even surprised it's possible)

With the segmentation faults, this looks quite similar to #850331. I did
not have the occasion yet to give it a try on a stretch system, in case
the backported version would have a compatibility issue with jessie's
Apache2

Thanks for your attention and your work in general!


-- 
Georges Racinet GPG: BF5456F4DC625443849B6E58EE20CA44EF691D39, sur
serveurs publics

Reply via email to