You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2015/07/22 22:22:04 UTC

[jira] [Commented] (TS-3790) action=tunnel in ssl_multicert.config will cause crash

    [ https://issues.apache.org/jira/browse/TS-3790?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14637557#comment-14637557 ] 

ASF subversion and git services commented on TS-3790:
-----------------------------------------------------

Commit 0ca8bff4c52ac066fbc74f8061338b9a8d1763fc in trafficserver's branch refs/heads/master from shinrich
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=0ca8bff ]

TS-3790: action=tunnel attribute will cause crash.


> action=tunnel in ssl_multicert.config will cause crash
> ------------------------------------------------------
>
>                 Key: TS-3790
>                 URL: https://issues.apache.org/jira/browse/TS-3790
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: SSL
>            Reporter: Susan Hinrichs
>            Assignee: Susan Hinrichs
>         Attachments: ts-3790.diff
>
>
> Enabled an old line in my ssl_multicert.config and accidentally tested the action=tunnel feature.  It caused the traffic_server process to crash.  The code was assuming that a handShakeBuffer must be present if we are deciding to do a blind tunnel, but that is only the case if the decision is made in the SNI callback.  I'm going to attach a patch that fixes the problem.
> Example line that will trigger the issue.  Packets addressed to 1.2.3.4 will try to convert to blind tunnel before any SSL handshake processing is attempted.
> {code}
> dest_ip=1.2.3.4 action=tunnel ssl_cert_name=servercert.pem ssl_key_name=privkey.pem
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)