You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by "Jason Giedymin (JIRA)" <ji...@apache.org> on 2010/02/06 19:45:28 UTC
[jira] Created: (TS-147) Reverse Proxy Mode + Cache crashes /
Segmentation fault when using HTTPS dynamic pages, Static Fine
Reverse Proxy Mode + Cache crashes / Segmentation fault when using HTTPS dynamic pages, Static Fine
---------------------------------------------------------------------------------------------------
Key: TS-147
URL: https://issues.apache.org/jira/browse/TS-147
Project: Traffic Server
Issue Type: Bug
Components: Network, Security
Environment: Ubuntu 9.10
Reporter: Jason Giedymin
In current trunk:
Trafficserver crashes when using HTTPS dynamic pages in reverse proxy + cache mode.
Crashes with Segmentation Fault.
The dynamic pages are PHP, and will crash. Happens with Phpmyadmin and wordpress.
Static pages work correctly fine.
<log>
[Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL ERROR: SSL_ServerHandShake.
[Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL::7:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1053:SSL alert number 46
NOTE: Traffic Server received Sig 11: Segmentation fault
traffic_server - STACK TRACE:
[0xb7755400]
traffic_server(_ZN17HttpServerSession11do_io_closeEi+0x22)[0x815cb22]
[0x1]
traffic_server(_ZN6HttpSM12main_handlerEiPv+0x299)[0x8176159]
traffic_server(_ZN18UnixNetVConnection9mainEventEiP5Event+0x441)[0x82d8f81]
traffic_server(_ZN13InactivityCop16check_inactivityEiP5Event+0x83)[0x82d15c3]
traffic_server(_ZN7EThread13process_eventEP5Eventi+0xa2)[0x82f7042]
traffic_server(_ZN7EThread7executeEv+0x504)[0x82f79f4]
traffic_server[0x82f676c]
/lib/tls/i686/nosegneg/libpthread.so.0[0xb7735815]
/lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
/lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
Segmentation fault (core dumped)
</log>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TS-147) Reverse Proxy Mode + Cache crashes /
Segmentation fault when using HTTPS dynamic pages, Static Fine
Posted by "James Henderson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12848864#action_12848864 ]
James Henderson commented on TS-147:
------------------------------------
I seem to be having the same issue, but with a static page under load. I am not getting the "SSL3_READ_BYTES:sslv3 alert certificate unknown" message though.
Environment: FreeBSD 7-STABLE on i386 using latest dev build
Backtrace:
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x28b01040 (LWP 100049)]
0x00000000 in ?? ()
(gdb) bt
#0 0x00000000 in ?? ()
#1 0x083006b5 in close_UnixNetVConnection (vc=0x2d9d0c30, t=0x28f00000) at UnixNetVConnection.cc:109
#2 0x082fc19f in NetHandler::mainNetEvent (this=0x28f00fc8, event=5, e=0x28c44e80) at UnixNet.cc:496
#3 0x08329744 in EThread::process_event (this=0x28f00000, e=0x28c44e80, calling_code=5) at I_Continuation.h:147
#4 0x08329f95 in EThread::execute (this=0x28f00000) at UnixEThread.cc:254
#5 0x081089ab in main (argc=Error accessing memory address 0x0
Steps to reproduce:
1) create reverse proxy using ssl.
- remap https://<server> to http://<internal_server>
- enable reverse proxy (I set to use pristine host headers and require remap)
- enable ssl (I used a bogus self signed cert for testing)
2) Using httpperf to create load from another server:
httperf --timeout=5 --client=0/1 --server=<traffic_server> --port=443 --uri=/ --rate=200 --send-buffer=4096 --recv-buffer=16384 --ssl --num-conns=5000 --num-calls=10
It works for a few seconds and then segfaults.
> Reverse Proxy Mode + Cache crashes / Segmentation fault when using HTTPS dynamic pages, Static Fine
> ---------------------------------------------------------------------------------------------------
>
> Key: TS-147
> URL: https://issues.apache.org/jira/browse/TS-147
> Project: Traffic Server
> Issue Type: Bug
> Components: Network, Security
> Environment: Ubuntu 9.10
> Reporter: Jason Giedymin
>
> In current trunk:
> Trafficserver crashes when using HTTPS dynamic pages in reverse proxy + cache mode.
> Crashes with Segmentation Fault.
> The dynamic pages are PHP, and will crash. Happens with Phpmyadmin and wordpress.
> Static pages work correctly fine.
> <log>
> [Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL ERROR: SSL_ServerHandShake.
> [Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL::7:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1053:SSL alert number 46
> NOTE: Traffic Server received Sig 11: Segmentation fault
> traffic_server - STACK TRACE:
> [0xb7755400]
> traffic_server(_ZN17HttpServerSession11do_io_closeEi+0x22)[0x815cb22]
> [0x1]
> traffic_server(_ZN6HttpSM12main_handlerEiPv+0x299)[0x8176159]
> traffic_server(_ZN18UnixNetVConnection9mainEventEiP5Event+0x441)[0x82d8f81]
> traffic_server(_ZN13InactivityCop16check_inactivityEiP5Event+0x83)[0x82d15c3]
> traffic_server(_ZN7EThread13process_eventEP5Eventi+0xa2)[0x82f7042]
> traffic_server(_ZN7EThread7executeEv+0x504)[0x82f79f4]
> traffic_server[0x82f676c]
> /lib/tls/i686/nosegneg/libpthread.so.0[0xb7735815]
> /lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
> /lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
> Segmentation fault (core dumped)
> </log>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TS-147) Reverse Proxy Mode + Cache crashes /
Segmentation fault when using HTTPS dynamic pages, Static Fine
Posted by "Jason Giedymin (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830579#action_12830579 ]
Jason Giedymin commented on TS-147:
-----------------------------------
It's possible that TS is trying to verify my orgin's client cert, which is what the message may refer to.
"SSL3_READ_BYTES:sslv3 alert certificate unknown"
Btw, I'm currently testing with a snake oil pair of keys.
> Reverse Proxy Mode + Cache crashes / Segmentation fault when using HTTPS dynamic pages, Static Fine
> ---------------------------------------------------------------------------------------------------
>
> Key: TS-147
> URL: https://issues.apache.org/jira/browse/TS-147
> Project: Traffic Server
> Issue Type: Bug
> Components: Network, Security
> Environment: Ubuntu 9.10
> Reporter: Jason Giedymin
>
> In current trunk:
> Trafficserver crashes when using HTTPS dynamic pages in reverse proxy + cache mode.
> Crashes with Segmentation Fault.
> The dynamic pages are PHP, and will crash. Happens with Phpmyadmin and wordpress.
> Static pages work correctly fine.
> <log>
> [Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL ERROR: SSL_ServerHandShake.
> [Feb 6 18:29:06.180] Server {2991545200} ERROR: SSL::7:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1053:SSL alert number 46
> NOTE: Traffic Server received Sig 11: Segmentation fault
> traffic_server - STACK TRACE:
> [0xb7755400]
> traffic_server(_ZN17HttpServerSession11do_io_closeEi+0x22)[0x815cb22]
> [0x1]
> traffic_server(_ZN6HttpSM12main_handlerEiPv+0x299)[0x8176159]
> traffic_server(_ZN18UnixNetVConnection9mainEventEiP5Event+0x441)[0x82d8f81]
> traffic_server(_ZN13InactivityCop16check_inactivityEiP5Event+0x83)[0x82d15c3]
> traffic_server(_ZN7EThread13process_eventEP5Eventi+0xa2)[0x82f7042]
> traffic_server(_ZN7EThread7executeEv+0x504)[0x82f79f4]
> traffic_server[0x82f676c]
> /lib/tls/i686/nosegneg/libpthread.so.0[0xb7735815]
> /lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
> /lib/tls/i686/nosegneg/libc.so.6(clone+0x5e)[0xb7134ebe]
> Segmentation fault (core dumped)
> </log>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.