Re: SSL renegotiation bug

2004-01-21 Thread Joe Orton
On Tue, Jan 20, 2004 at 04:35:34PM -0600, Ben Collins-Sussman wrote: Sorry to be so slow in getting back to you, Joe. I'm still desperately looking for a clue on this SSL hang that happens when I run 'apachectl graceful'. On Wed, 2004-01-14 at 15:51, Joe Orton wrote: The client is

Re: SSL renegotiation bug

2004-01-21 Thread Ben Collins-Sussman
On Wed, 2004-01-21 at 04:29, Joe Orton wrote: $ sudo strace -p 3850 trace: ptrace(PTRACE_SYSCALL, ...): Operation not permitted detach: ptrace(PTRACE_DETACH, ...): Operation not permitted Ah, add CoreDumpDirectory /tmp to your httpd.conf and make sure you're running the latest errata

Re: SSL renegotiation bug

2004-01-21 Thread Joe Orton
On Wed, Jan 21, 2004 at 11:12:20AM -0600, Ben Collins-Sussman wrote: On Wed, 2004-01-21 at 04:29, Joe Orton wrote: I have now managed to reproduce hangs a couple of times here, What exactly was your reproduction recipe? Same as mine? Start an import over SSL and then 'graceful' the

Re: SSL renegotiation bug

2004-01-21 Thread Ben Collins-Sussman
On Wed, 2004-01-21 at 11:26, Joe Orton wrote: By doing graceful restarts every few seconds during a large import, I could reproduce a hang using ra_dav both over SSL or over plain HTTP to a 0.36.0 server running on the localhost, when using DB 4.1.25. I've upgraded to 4.2.52 and I can no

Re: SSL renegotiation bug

2004-01-20 Thread Ben Collins-Sussman
Sorry to be so slow in getting back to you, Joe. I'm still desperately looking for a clue on this SSL hang that happens when I run 'apachectl graceful'. On Wed, 2004-01-14 at 15:51, Joe Orton wrote: The client is hanging on a select() call: What's the server doing? Hm, I can't seem to

Re: SSL renegotiation bug

2004-01-14 Thread Ben Collins-Sussman
On Tue, 2004-01-13 at 17:26, Joe Orton wrote: Is there still a TCP connection between the client and server at this point? If so, you can identify the server child in question via the server-status output or netstat -pt, and strace the process to see what it's doing. After the hang,

Re: SSL renegotiation bug

2004-01-14 Thread Joe Orton
On Wed, Jan 14, 2004 at 03:27:23PM -0600, Ben Collins-Sussman wrote: On Tue, 2004-01-13 at 17:26, Joe Orton wrote: Is there still a TCP connection between the client and server at this point? If so, you can identify the server child in question via the server-status output or netstat

SSL renegotiation bug

2004-01-13 Thread Ben Collins-Sussman
Hello, Apache folk. After showing this bug to gstein, iholsman, and others in IRC, I fear I may have found a real bug. It has something to do with SSL, but it's not clear whether this is a bug in the Neon library, OpenSSL, mod_ssl, or httpd itself. Client is: Redhat 9, svn 0.36.0 using neon

Re: SSL renegotiation bug

2004-01-13 Thread Joe Orton
On Tue, Jan 13, 2004 at 04:43:07PM -0600, Ben Collins-Sussman wrote: Hello, Apache folk. After showing this bug to gstein, iholsman, and others in IRC, I fear I may have found a real bug. It has something to do with SSL, but it's not clear whether this is a bug in the Neon library,