On Mon, Apr 05, 1999, [EMAIL PROTECTED] wrote:

> Full_Name: Cliff Woolley
> Version: 2.2.7
> OS: linux 2.2.5 slackware 3.6
> Submission from: apocalypse.uc.wlu.edu (137.113.241.101)
> 
> I discovered the hard way that accidentally overwriting the server.key and
> server.crt with the defaults from the installation package (or, apparently,
> any file that doesn't follow the format...  tried a zero length file and it
> did the same thing), mod_ssl causes apache to segfault upon startup.  This
> may or may not be related to problem report #97, although #97 is rather
> outdated at this point.

Hmmm.... when I mess up a server.crt file by just inserting a few garbage
characters I still get:

| [Tue Apr  6 14:47:42 1999] [error] mod_ssl: Init: Unable to read server
| certificate from file /tmp/apache-ssl/etc/ssl.crt/server.crt (OpenSSL library
| error follows) 
| [Tue Apr  6 14:47:42 1999] [error] OpenSSL: error:0D06B078:asn1 encoding
| routines:ASN1_get_object:header too long

Even when I copy my FreeBSD /kernel file over the server.crt I do not see core
dumps (now a different error because no PEM headers exists, of course):

| [Tue Apr  6 14:48:46 1999] [error] mod_ssl: Init: Unable to read server certificate 
|from file
| /tmp/apache-ssl/etc/ssl.crt/server.crt (OpenSSL library error follows) 
| [Tue Apr  6 14:48:46 1999] [error] OpenSSL: error:0D09F007:asn1 encoding
| routines:D2I_X509:expecting an asn1 sequence

Additionally I see no bug in mod_ssl's loading code. So when it actually dumps
core it dumps core inside OpenSSL. That's not better, of course. But at least
I guess it's then related to your platform (Slackware 3.6), where a lot of
things are _known_ to be broken (like the NDBM library, etc).

                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)  www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to