Hello. My name is Yuji Takano, working at Crayfish, Co., Ltd.
We are user of apache_1.3.9+ssl_1.37.
I found a kind of bug on openssl-0.9.4 side in the envilonment
using apache_1.3.9+ssl_1.37 with openssl-0.9.4. Patch list is
attached below.
Detail of this bug is that when I write "SSLCACertificatePath"
on "httpsd.conf", it spends a big amount of file descripters to
the specified directory.
When "SSLCACertificatePath" is specified, the patch which is
designed to closedir the specified directory is attached also
below.
I think this is a very effective patch when lots of
"VirtualHost" is written.
Of course, I have checked the source of openssl-0.9.5a and it
seems that it is not corresponded. So if you need to fix the
problem, please use my patch which attached below.
Best regards,
---
TAKANO Yuji e-mail:[EMAIL PROTECTED]
Crayfish Co., Ltd.
35F, Shinjuku-Park Tower Bidg., 3-7-1
NishiShinjuku,Shinjuku-ku Tokyo JAPAN
Tel.03-5324-6495 Fax.03-5324-6485
diff -urN openssl-0.9.5a.ORG/ssl/ssl_cert.c openssl-0.9.5a/ssl/ssl_cert.c
--- openssl-0.9.5a.ORG/ssl/ssl_cert.c Fri Mar 17 04:47:31 2000
+++ openssl-0.9.5a/ssl/ssl_cert.c Thu May 25 19:08:47 2000
@@ -744,6 +744,7 @@
err:
CRYPTO_w_unlock(CRYPTO_LOCK_READDIR);
+ closedir(d);
return ret;
}
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]