https://bz.apache.org/bugzilla/show_bug.cgi?id=64426
Bug ID: 64426
Summary: TestSSLHostConfigCompat crashes with LibreSSL 2.9.0
Product: Tomcat Native
Version: 1.2.23
Hardware: All
OS: FreeBSD
Status: NEW
Severity: major
Priority: P2
Component: Library
Assignee: dev@tomcat.apache.org
Reporter: micha...@apache.org
Target Milestone: ---
How to reproduce:
Obtain master (51f949dc6e0b6e4e27972b8ba2d0a2626fc3c1c5) for tomcat-native,
revert b8649e81458194d70667952d9e26df82a79c773f. Obtain Tomcat master.
* Apply this patch against tcnative:
diff --git a/native/src/ssl.c b/native/src/ssl.c
index fcb2a9ec..ad0a17fd 100644
--- a/native/src/ssl.c
+++ b/native/src/ssl.c
@@ -1328 +1328,3 @@ TCN_IMPLEMENT_CALL(jlong /* SSL * */, SSL,
newSSL)(TCN_STDARGS,
- tcn_ThrowException(e, "cannot create new ssl");
+ char err[256];
+ ERR_error_string(SSL_ERR_get(), err);
+ tcn_Throw(e, "Cannot create new SSL (%s)", err);
* Compile tomcat-native against LibreSSL 2.9.0 and 2.9.1
Comipling previous versions of LibreSSL is tricky:
** Clone from GitHub
** Switch to v2.9.0 or v2.9.1
** Apply patch:
diff --git a/update.sh b/update.sh
index 3315311..bc291e2 100755
--- a/update.sh
+++ b/update.sh
@@ -18 +18 @@ fi
- git pull --rebase)
+ )
** Modify OPENBSD_BRANCH to libressl-v2.9.0 or libressl-v2.9.1
** Perform ./update.sh
*** NOTE: When switching between versions all produce needs to be wiped out,
along with openbsd/!
* Prefixes: /tmp/tcnative, /tmp/libressl-2.9.0, /tmp/libressl-2.9.1
* Run "ant test
-Dtest.entry=org.apache.tomcat.util.net.TestSSLHostConfigCompat" with both.
2.9.1 shall succeed, 2.9.0 will fail with two issues ("java.lang.Exception:
Unable to use Java keystores with LibreSSL" can be ignored, this is expected):
** java.lang.Exception: Cannot create new SSL (error:14FFF0C3:SSL
routines:(UNKNOWN)SSL_internal:null ssl ctx)
** [junit] # JRE version: OpenJDK Runtime Environment (8.0_252-b09) (build
1.8.0_252-b09)
[junit] # Java VM: OpenJDK 64-Bit Server VM (25.252-b09 mixed mode
bsd-amd64 compressed oops)
[junit] # Problematic frame:
[junit] # C [libssl.so.47+0x3f2e9] SSL_CTX_use_certificate+0x9
[junit] #
Log files attached.
I don't know whether it is our code or a bug in LibreSSL below 2.9.1. We might
say, since 2.9.1 is the first stable release from the 2.9.x, it is a minimum
version.
All tests performed with:
* Compiler:
FreeBSD clang version 9.0.1 (g...@github.com:llvm/llvm-project.git
c1a0a213378a458fbea1a5c77b315c7dce08fd05) (based on LLVM 9.0.1)
Target: x86_64-unknown-freebsd12.1
Thread model: posix
InstalledDir: /usr/bin
* Java:
openjdk version "1.8.0_252"
OpenJDK Runtime Environment (The FreeBSD Project)(build 1.8.0_252-b09)
OpenJDK 64-Bit Server VM (The FreeBSD Project)(build 25.252-b09, mixed mode)
* OS: FreeBSD 12.1-STABLE #1 r360428
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
