You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@httpd.apache.org by Mark Drummond <md...@yahoo.ca> on 2007/03/30 07:08:22 UTC

[users@httpd] apachectl startssl returns "assertion 'rv == APR_SUCCESS" failed'

Hello everyone,



This is probably better directed to the mod_ssl folks but their majordomo is using SORBS and SORBS is blocking Yahoo mail accounts.



I have Apache 2.0.59 binaries (and required supporting components) from sunfreeware installed on two Solaris 9 9/04 servers. The two systems are identical in most respects. They differ in terms of patch levels.
On both servers I created self signed certificates for testing purposes. I have only made the bare minimum necessary edits to httpd.conf, and no edits at all to ssl.conf (Apache 2.0.59 from sunfreeware breaks SSL configuration off into a separate file).

Apache starts just fine on the one server, and chokes on the other server.

Good guy:

# ../ssl/bin/openssl req -new -x509 -nodes -out conf/ssl.crt/server.crt -keyout conf/ssl.key/server.key
.
.
.
# ../bin/apachectl startssl
# ps -ef | grep [a]pache2
  nobody 12433 12428  0 01:04:25 ?        0:00 /usr/local/apache2/bin/httpd -k start -DSSL
  nobody 12434 12428  0 01:04:25 ?        0:00 /usr/local/apache2/bin/httpd -k start -DSSL
  nobody 12432 12428  0 01:04:25 ?        0:00 /usr/local/apache2/bin/httpd -k start -DSSL
  nobody 12431 12428  0 01:04:25 ?        0:00 /usr/local/apache2/bin/httpd -k start -DSSL
  nobody 12435 12428  0 01:04:25 ?        0:00 /usr/local/apache2/bin/httpd -k start -DSSL
    root 12428     1  1 01:04:24 ?        0:01 /usr/local/apache2/bin/httpd -k start -DSSL
#


Bad guy:

# ../ssl/bin/openssl req -new -x509 -nodes -out conf/ssl.crt/server.crt -keyout conf/ssl.key/server.key
.

.

.

# ../bin/apachectl startssl
[Fri Mar 30 01:05:29 2007] [crit] [Fri Mar 30 01:05:29 2007] file vhost.c, line 190, assertion "rv == APR_SUCCESS" failed
Abort - core dumped
#


I used the same sunfreeware packages to install Apache, OpenSSL, zlib, libgcc etc.

Any ideas? This is meant to become my new production web server, replacing an older IBM HTTPD 2.0.47.1, but the machine that is failing is my prod box. It works on the dev/test box.

Thanks,
Mark

 
-- 

Georgia: Why am I not doing what they're doing? 

Rube: Because you're doing what you're doing. When it's time for you to do something else you'll do that.






---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: [users@httpd] apachectl startssl returns "assertion 'rv == APR_SUCCESS" failed'

Posted by Axel-Stephane SMORGRAV <Ax...@europe.adp.com>.

You can circumvent this problem by configuring your host to use a DNS server for name resolution, ie. configure nsswitch.conf with "host: file dns" and have a resolv.conf with appropriate contents.

The reason why you experience this error only on one of your servers is because one is configured for DNS resolution, and the other not.

This is a known bug in Apache 2.0.x. I believe it was solved in Apache 2.2.x

-ascs

-----Message d'origine-----
De : mikeporter [mailto:mike@udel.edu]
Envoyé : mercredi 5 décembre 2007 05:30
À : users@httpd.apache.org
Objet : Re: [users@httpd] apachectl startssl returns "assertion 'rv == APR_SUCCESS" failed'

I think this is caused by Apache trying to bind to an IP that does not have a PTR record or other way to turn the IP into a name. I ran into this a bit ago when booting a server that has an interal IP used to communicate with its platform controller.
This IP did not
have a name. I temporarily solved the problem by changing from _default_ to '*', but this not a good solution because now Apache has bound to this special IP. I suspect this is why the platform controller can not talk to the Solaris domain, but I'm going to wait until tomorrow before messing with it further.

Mike

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] apachectl startssl returns "assertion 'rv == APR_SUCCESS" failed'

Posted by mikeporter <mi...@udel.edu>.

I think this is caused by Apache trying to bind to an IP that does not have
a PTR record or
other way to turn the IP into a name. I ran into this a bit ago when
booting a server
that has an interal IP used to communicate with its platform controller.
This IP did not
have a name. I temporarily solved the problem by changing from _default_ to
'*', but
this not a good solution because now Apache has bound to this special IP. I
suspect this
is why the platform controller can not talk to the Solaris domain, but I'm
going to wait until
tomorrow before messing with it further.

Mike

--
View this message in context: http://www.nabble.com/apachectl-startssl-returns-%22assertion-%27rv-%3D%3D-APR_SUCCESS%22-failed%27-tf3490291.html#a14165117
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.