Holger/Ralf:
Configuration:
Irix 6.5.3
apache_ 1.3.9
mod_ssl-2.4.0-1.3.9
OpenSSL 0.9.4
A week or two ago I asked if there was a bug fix for this particular little
problem. We have created our own module to talk to our backend systems.
Therefore we do not go through the SSL_EXPERIMENTAL code that is implemented
in ssl_io_suck(). I determined to trace this problem down with the debugger
and I believe that I finally know why this error is generated!
I noticed that if I download a large page from our backend that I only very
rarely experienced this error coming from Netscape. I also noticed that
small pages (abstracts/citations from periodical journals) always caused the
error to occur.
I started stepping through the mod_ssl hooks to see what I/O occurs between
the server and the browser. I noticed that I would get the error when
ssl_io_hook_write() was called. ssl_io_hook_write() tries to retrieve the
ssl context. If the context is not found, then a plain old write is called.
I found out that I would get the error when getting the SSL context returned
a NULL. I then looked at the stack backtrace and found the following:
ssl_io_hook_write
ap_hook_call
ap_write
buff_write
write_with_errors
bflush_core
ap_bflush
ap_bclose
child_main
I then looked at the code in child_main() and found that
ap_call_close_connection_hook(current_conn) is called before calling
ap_bclose(). Voila--close the connection and the SSL context will be gone!
Switching the order of the calls to
ap_call_close_connection_hook(current_conn) and ap_bclose() gets rid of the
error message but I don't think that is appropriate. I believe (in my so
far limited knowlege of mod_ssl) that the "logical" SSL connection needs to
be closed before the "OS" file descriptor is closed. However, if there is
still data in the outbound buffer it needs to be flushed before the code in
ap_bclose() gets called. Should instead an ap_bflush() be called within
ssl_hook_CloseConnection() before doing the SSL connection close?
I would like to put this bug to bed soon. Would you be so kind as to look
at this and give me some advice?
Thanks
Paul E Wilt
Principal Software Engineer
____________________________________________________
Bell & Howell Information and Learning (Formerly UMI)
http://www.bellhowell.infolearning.com
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
300 North Zeeb Rd Phone: (734) 975-6021
Ann Arbor, MI 48106 Fax: (734) 973-0737
____________________________________________________
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
