Hello. My name is Yuji Takano, working at Crayfish, Co., Ltd. 
 
We are user of apache_1.3.9+ssl_1.37. 
 
I found a kind of bug on openssl-0.9.4 side in the envilonment
using apache_1.3.9+ssl_1.37 with openssl-0.9.4. Patch list is
attached below. 
 
Detail of this bug is that when I write "SSLCACertificatePath"
on "httpsd.conf", it spends a big amount of file descripters to
the specified directory. 
 
When "SSLCACertificatePath" is specified, the patch which is
designed to closedir the specified directory is attached also
below. 
I think this is a very effective patch when lots of
"VirtualHost" is written. 
 
Of course, I have checked the source of openssl-0.9.5a and it
seems that it is not corresponded. So if you need to fix the
problem, please use my patch which attached below. 
 
Best regards, 
 
---
TAKANO Yuji                         e-mail:[EMAIL PROTECTED]
                                              Crayfish Co., Ltd.
                           35F, Shinjuku-Park Tower Bidg., 3-7-1
                           NishiShinjuku,Shinjuku-ku Tokyo JAPAN
                               Tel.03-5324-6495 Fax.03-5324-6485




diff -urN openssl-0.9.5a.ORG/ssl/ssl_cert.c openssl-0.9.5a/ssl/ssl_cert.c
--- openssl-0.9.5a.ORG/ssl/ssl_cert.c   Fri Mar 17 04:47:31 2000
+++ openssl-0.9.5a/ssl/ssl_cert.c       Thu May 25 19:08:47 2000
@@ -744,6 +744,7 @@
 
 err:   
     CRYPTO_w_unlock(CRYPTO_LOCK_READDIR);
+    closedir(d);
     return ret;
     }
 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to