DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=4545>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=4545

Webapp connector seg faults under an SSL connection





------- Additional Comments From [EMAIL PROTECTED]  2001-10-31 12:06 -------
Traced this under the debugger.
It is this block of code:

        ssl_temp = (char *)ap_table_get(
            r->subprocess_env,"SSL_CIPHER_USEKEYSIZE");
        req->ssld->size = atoi(ssl_temp);

Unless SSLOptions +StdEnvVars is defined in httpd.conf, only UNIQUE_ID and 
HTTPS are in the subprocess environment. 

These environment variables are really for CGI communication. What about 
instead using the openssl apis for getting this information? It would mean 
coupling with openssl, but with much lower overhead per request?

eg:

 ssl = ap_ctx_get(r->connection->client->ctx, "ssl");
 ssl_var_lookup_ssl_cipher_bits(ssl, &usekeysize, &algkeysize);


static void ssl_var_lookup_ssl_cipher_bits(SSL *ssl, int *usekeysize, int 
*algkeysize)
{
    SSL_CIPHER *cipher;

    *usekeysize = 0;
    *algkeysize = 0;
    if (ssl != NULL)
        if ((cipher = SSL_get_current_cipher(ssl)) != NULL)
            *usekeysize = SSL_CIPHER_get_bits(cipher, algkeysize);
    return;
}

It would probably mean mucking about with autoconf to get the correct openssl 
includes, though.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to