From owner-freebsd-stable@FreeBSD.ORG Sun Mar 20 09:20:21 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C995516A4CE for ; Sun, 20 Mar 2005 09:20:21 +0000 (GMT) Received: from netcore.fi (netcore.fi [193.94.160.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id C132E43D54 for ; Sun, 20 Mar 2005 09:20:20 +0000 (GMT) (envelope-from pekkas@netcore.fi) Received: from localhost (pekkas@localhost) by netcore.fi (8.11.6/8.11.6) with ESMTP id j2K9KIQ19474 for ; Sun, 20 Mar 2005 11:20:19 +0200 Date: Sun, 20 Mar 2005 11:20:18 +0200 (EET) From: Pekka Savola To: freebsd-stable@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Subject: Re: Apache Signal 11 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2005 09:20:21 -0000 FWIW, I've started to experience the same thing which Kyle Mott and "Vlad" reported with apache+mod_ssl crashing when SSL is enabled: #0 0x2840b63c in engine_table_select () from /usr/lib/libcrypto.so.3 #1 0x283ebc88 in ENGINE_get_default_RAND () from /usr/lib/libcrypto.so.3 #2 0x283eaf6e in RAND_get_rand_method () from /usr/lib/libcrypto.so.3 #3 0x283eb07c in RAND_seed () from /usr/lib/libcrypto.so.3 #4 0x2830be47 in ssl_rand_seed () from /usr/local/libexec/apache/libssl.so #5 0x28307dac in ssl_init_Module () from /usr/local/libexec/apache/libssl.so #6 0x8055714 in ap_init_modules () #7 0x805d8fe in standalone_main () #8 0x805e08b in main () #9 0x804fcde in _start () A few salient points: - running FreeBSD-4.11 stable, and the latest apache+mod_ssl port w/ PHP - the crash occurs before httpd creates the child processes - disabling PHP does not work; disabling SSL works around this problem (but is not an acceptable solution, of course :) - I don't have any cryptocards, nor have I made any significant changes to the system since this started happening. The system uptime was around 40 days, so the process has at least started fine 40 days ago. - rebuilding world and apache+mod_ssl does not help - /dev/{u,}random seem to be fine - my /tmp is mounted nodev,noexec,nosuid but this has worked with it in the past, so should not be an issue. -- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings