[Bug 57553] New: mod_ssl_ct causes connection failures when configured 'empty'

[bu...@apache.org]

https://issues.apache.org/bugzilla/show_bug.cgi?id=57553

            Bug ID: 57553
           Summary: mod_ssl_ct causes connection failures when configured
                    'empty'
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: tom@ritter.vg

I'm running mod_ssl_ct on 2.4 backport, as described here:
https://github.com/trawick/ct-httpd/tree/master/src/2.4.x

I set up a benign configuration, that is, as far as I can understand that
shouldn't do anything.  Specifically:

CTAuditStorage /run/ct-audit
CTSCTStorage   /run/ct-scts
CTStaticSCTs /etc/apache2/ssl/rittervg-leaf.cer /etc/apache2/ssl/scts

All directories start off empty, I have two SSL sites enabled, one is ritter.vg
the other crypto.is. After running a little bit:

 - ct-audit gets a couple audit_XXXX.tmp files
 - ct-scts gets two directories, one with servercerts.pem the other with
servercerts.pem and collated.tmp
 - /etc/apache2/ssl/scts remains empty

I get the following Apache error that causes connection failures in Chrome:

(2)No such file or directory: AH02779: couldn't read
/run/ct-scts/4c3fbfbac7589ee68d753f806acc822cbd5082c735fdc3fce3924dc32959288f/collated

(I get back a Close notify alert, attempt to fallback to TLS 1.1 which fails
because I'm running an OpenSSL that doesn't permit that.)

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org