From owner-freebsd-apache@FreeBSD.ORG Thu Dec 23 17:25:29 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 75EEF106564A for ; Thu, 23 Dec 2010 17:25:29 +0000 (UTC) (envelope-from agl@google.com) Received: from smtp-out.google.com (smtp-out.google.com [216.239.44.51]) by mx1.freebsd.org (Postfix) with ESMTP id 2A6498FC0A for ; Thu, 23 Dec 2010 17:25:28 +0000 (UTC) Received: from kpbe11.cbf.corp.google.com (kpbe11.cbf.corp.google.com [172.25.105.75]) by smtp-out.google.com with ESMTP id oBNH96FC011037 for ; Thu, 23 Dec 2010 09:09:06 -0800 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1293124147; bh=62vk/xjHAsmZzOCWqP5ru4HuNxY=; h=MIME-Version:Sender:Date:Message-ID:Subject:From:To:Content-Type; b=TjHqgAMyNASrQgoUdXmZcWglErPHJCvNqs1alDsMhFN01p7MUHWuV1wdHuimvEo5R 2yb7hj/8i3RxYmp8FBIDw== Received: from iyj21 (iyj21.prod.google.com [10.241.51.85]) by kpbe11.cbf.corp.google.com with ESMTP id oBNH95Zr019767 for ; Thu, 23 Dec 2010 09:09:05 -0800 Received: by iyj21 with SMTP id 21so5619385iyj.36 for ; Thu, 23 Dec 2010 09:09:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=domainkey-signature:mime-version:received:sender:received:date :x-google-sender-auth:message-id:subject:from:to:content-type; bh=L1NZcQxaCvqj1aZQDzYEw6fi9rRazUUTuWZBjPBMcac=; b=t3MdMD58NPVjrmSkXn6rnn2O6i5mFB47Rh/z9UhSGrnfTt9zmyQb2X2WNLrJwMfdrT /7HGQm1YfsDgrnGsJ49A== DomainKey-Signature: a=rsa-sha1; c=nofws; d=google.com; s=beta; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; b=P4e2FKpu982UoJ4SmbiRVOloN/H6n1WCzLJWTBEGekW8+udJyTR9hiTrzGLGDR6MhN fDgqV8FwukUrobbSvwmQ== MIME-Version: 1.0 Received: by 10.231.15.5 with SMTP id i5mr8159456iba.149.1293124145353; Thu, 23 Dec 2010 09:09:05 -0800 (PST) Sender: agl@google.com Received: by 10.231.16.193 with HTTP; Thu, 23 Dec 2010 09:09:05 -0800 (PST) Date: Thu, 23 Dec 2010 12:09:05 -0500 X-Google-Sender-Auth: 7UhG0jHXgeZPz4Y09hme2FAaEig Message-ID: From: Adam Langley To: apache@freebsd.org Content-Type: text/plain; charset=UTF-8 X-System-Of-Record: true Cc: Subject: Mismatched OpenSSL versions causing crashes X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Dec 2010 17:25:29 -0000 Hi there, I'm a developer on Google Chrome and we've seen some reports recently that Chrome isn't working with some HTTPS sites. Getting details has been tough, but I have one example of a site which is reporting these strings: FreeBSD iden2334.securesites.net 6.4-RELEASE-p8 FreeBSD 6.4-RELEASE-p8 #1 r101746: Mon Aug 30 10:34:40 MDT 2010 root@fc:/usr/src/sys/i386/compile/VKERN i386 Apache/2.2.15 (Unix) PHP/5.2.9 with Suhosin-Patch mod_ssl/2.2.15 OpenSSL/1.0.0a mod_apreq2-20051231/2.6.0 mod_perl/2.0.3 Perl/v5.8.7 The interesting bit is that, on the PHP info page it includes: OpenSSL Version OpenSSL 0.9.8m 25 Feb 2010 I suspect that the Apache binary has been compiled against OpenSSL 0.9.8 headers, but is run-time linking against libcrypto.so from 1.0.0a. Chrome negotiates DEFLATE compression and this appears to be triggering crashes. (0.9.8 and 1.0.0 are not ABI compatible, although they are close enough that it might appear to mostly work.) I'm afraid that I don't know enough about FreeBSD to know if this is a package issue or an administrator error. However, I thought that I would bring it to your attention. If these folks have messed up something with their systems I'd be happy to pass on a message to them in the future. Cheers AGL