Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-1484

SSL-crashed every now and then with 3.2.0 + SNI-fixes

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.2.0
    • 3.2.4
    • SSL
    • None
    • RHEL6, x86_64, RHEV Virtual machines, IPv4 and IPv6 failover addresses, wildcard SSL-certificates

    Description

      We're running ATS v3.2.0 + patch 9c3bebd88eecf6aee1ce346b67460b8e1787752d to fix support for non-SNI browsers, and every now and (daily I think) then we're getting this crash:

      [Sep 19 03:14:00.147] Server {0x2b2517a7c700} ERROR: SSL ERROR: SSL_ServerHandShake.
      [Sep 19 03:14:00.148] Server {0x2b2517a7c700} ERROR: SSL::8:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:593:
      NOTE: Traffic Server received Sig 11: Segmentation fault
      /usr/bin/traffic_server - STACK TRACE:
      /lib64/libpthread.so.0(+0xf500)[0x2b2505b84500]
      /usr/lib64/libssl.so.10(SSL_CTX_callback_ctrl+0x5)[0x2b250662f425]
      /usr/bin/traffic_server(SSLNetVConnection::sslStartHandShake(int, int&)+0xf2)[0x6675a2]
      /usr/bin/traffic_server(SSLNetVConnection::net_read_io(NetHandler*, EThread*)+0x208)[0x666c78]
      /usr/bin/traffic_server(NetHandler::mainNetEvent(int, Event*)+0x1f2)[0x66e0e2]
      /usr/bin/traffic_server(EThread::process_event(Event*, int)+0xb4)[0x696c94]
      /usr/bin/traffic_server(EThread::execute()+0x4c3)[0x697623]
      /usr/bin/traffic_server[0x695c62]
      /lib64/libpthread.so.0(+0x7851)[0x2b2505b7c851]
      /lib64/libc.so.6(clone+0x6d)[0x2b250800667d]
      [Sep 19 03:14:00.159] Manager {0x7ff63f1b07e0} ERROR: [LocalManager::pollMgmtProcessServer] Server Process terminated due to Sig 11: Segmentation fault
      

      Attachments

        1. TS1484.patch
          4 kB
          James Peach
        2. TS-1484-3.2.x.patch
          9 kB
          Igor Galić

        Activity

          People

            jamespeach James Peach
            janfrode Jan-Frode Myklebust
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: