Bug#215011: marked as done (apache-ssl: requests leave 'SSL23_GET_CLIENT_HELLO:unknown protocol' in error.log, and fail)
Your message dated Fri, 10 Oct 2003 09:32:19 -0400
with message-id <E1A7xNT-0000Ta-00@auric.debian.org>
and subject line Bug#215011: fixed in apache 1.3.28-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 9 Oct 2003 21:49:00 +0000
>From garou@garou.dyndns.org Thu Oct 09 16:48:57 2003
Return-path: <garou@garou.dyndns.org>
Received: from sccrmhc11.comcast.net [204.127.202.55]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1A7ieX-00021R-00; Thu, 09 Oct 2003 16:48:57 -0500
Received: from garou.dyndns.org ([68.34.44.17])
by comcast.net (sccrmhc11) with ESMTP
id <2003100921485501100mkim7e>; Thu, 9 Oct 2003 21:48:55 +0000
Received: from garou by garou.dyndns.org with local (Exim 3.36 #1 (Debian))
id 1A7ieV-000814-00; Thu, 09 Oct 2003 17:48:55 -0400
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "D.J.Moon" <dgmoon@comcast.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: apache-ssl: requests leave 'SSL23_GET_CLIENT_HELLO:unknown protocol' in
error.log, and fail
X-Mailer: reportbug 2.34
Date: Thu, 09 Oct 2003 17:48:45 -0400
Message-Id: <[🔎] E1A7ieV-000814-00@garou.dyndns.org>
Sender: "D.J.Moon" <garou@garou.dyndns.org>
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0
tests=HAS_PACKAGE
version=2.53-bugs.debian.org_2003_10_09
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_10_09 (1.174.2.15-2003-03-30-exp)
Package: apache-ssl
Version: 1.3.28-2
Severity: grave
Tags: sid
Justification: renders package unusable
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux garou 2.4.19 #1 Fri Jan 17 19:12:48 EST 2003 i686
Locale: LANG=C, LC_CTYPE=C
Versions of packages apache-ssl depends on:
ii apache-common 1.3.28-2 Support files for all Apache webse
ii debconf 1.3.14 Debian configuration management sy
ii dpkg 1.10.15 Package maintenance system for Deb
ii libc6 2.3.2-8 GNU C Library: Shared libraries an
ii libdb4.1 4.1.25-9 Berkeley v4.1 Database Libraries [
ii libexpat1 1.95.6-6 XML parsing C library - runtime li
ii libmagic1 4.04-1 File type determination library us
ii libssl0.9.7 0.9.7c-3 SSL shared libraries
ii logrotate 3.6.5-2 Log rotation utility
ii mime-support 3.23-1 MIME files 'mime.types' & 'mailcap
ii openssl 0.9.7c-3 Secure Socket Layer (SSL) binary a
ii perl [perl5] 5.8.1-2 Larry Wall's Practical Extraction
ii ssl-cert 1.0-4 Simple debconf wrapper for openssl
-- debconf information:
apache-ssl/server-name: localhost
apache-ssl/document-root: /var/www
apache-ssl/init: true
apache-ssl/server-admin: webmaster@garou.dyndns.org
* apache-ssl/enable-suexec: true
I updated apache-ssl this afternoon, and now all requests to the server fail.
Accessing the same URL's on my (non-ssl) apache install works fine. Following
are snippets of my server logs around a pair of typical failing requests.
/var/log/apache-ssl/error.log
[Thu Oct 9 17:25:01 2003] [error] SSL_accept failed
[Thu Oct 9 17:25:01 2003] [error] error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
[Thu Oct 9 17:28:45 2003] [error] SSL_accept failed
[Thu Oct 9 17:28:45 2003] [error] error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
read in saferead: Connection reset by peer
apache-ssl: gcachecommon.c:108: ReadThing: Assertion `nRead == sizeof usLength' failed.
[Thu Oct 9 17:28:45 2003] [notice] child pid 30676 exit signal Aborted (6)
/var/log/apache-ssl/access.log
127.0.0.1 - - [09/Oct/2003:17:25:01 -0400] "GET /drupal/cron.php HTTP/1.0" 200 0 "-" "Wget/1.8.2"
/var/log/apache-ssl/ssl.log
[09/Oct/2003:17:25:01 -0400] TLS1 AES256-SHA -
Yes, I noticed too that there are failures for two requests in the error.log,
but one of them (time 17:28:45) does not show up it the other two files. That
one is me trying to access my site externally. My browser (Mozilla on windows)
reported the failure as "The connection to garou.dyndns.org has terminated
unexpectedly. Some data may have been transferred." The one that shows up in
all three files (time 17:25:01) is the drupal cron job.
---------------------------------------
Received: (at 215011-close) by bugs.debian.org; 10 Oct 2003 13:38:33 +0000
>From katie@auric.debian.org Fri Oct 10 08:38:25 2003
Return-path: <katie@auric.debian.org>
Received: from auric.debian.org [206.246.226.45]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1A7xT9-0002LB-00; Fri, 10 Oct 2003 08:38:12 -0500
Received: from katie by auric.debian.org with local (Exim 3.35 1 (Debian))
id 1A7xNT-0000Ta-00; Fri, 10 Oct 2003 09:32:19 -0400
From: fabbione@fabbione.net (Fabio M. Di Nitto)
To: 215011-close@bugs.debian.org
X-Katie: $Revision: 1.37 $
Subject: Bug#215011: fixed in apache 1.3.28-3
Message-Id: <E1A7xNT-0000Ta-00@auric.debian.org>
Sender: Archive Administrator <katie@auric.debian.org>
Date: Fri, 10 Oct 2003 09:32:19 -0400
Delivered-To: 215011-close@bugs.debian.org
Source: apache
Source-Version: 1.3.28-3
We believe that the bug you reported is fixed in the latest version of
apache, which is due to be installed in the Debian FTP archive:
apache-common_1.3.28-3_i386.deb
to pool/main/a/apache/apache-common_1.3.28-3_i386.deb
apache-dev_1.3.28-3_i386.deb
to pool/main/a/apache/apache-dev_1.3.28-3_i386.deb
apache-doc_1.3.28-3_all.deb
to pool/main/a/apache/apache-doc_1.3.28-3_all.deb
apache-perl_1.3.28-3_i386.deb
to pool/main/a/apache/apache-perl_1.3.28-3_i386.deb
apache-ssl_1.3.28-3_i386.deb
to pool/main/a/apache/apache-ssl_1.3.28-3_i386.deb
apache_1.3.28-3.diff.gz
to pool/main/a/apache/apache_1.3.28-3.diff.gz
apache_1.3.28-3.dsc
to pool/main/a/apache/apache_1.3.28-3.dsc
apache_1.3.28-3_i386.deb
to pool/main/a/apache/apache_1.3.28-3_i386.deb
libapache-mod-perl_1.28-3_i386.deb
to pool/main/a/apache/libapache-mod-perl_1.28-3_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 215011@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Fabio M. Di Nitto <fabbione@fabbione.net> (supplier of updated apache package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 10 Oct 2003 14:52:48 +0200
Source: apache
Binary: apache-common apache-doc apache-dev apache-perl apache libapache-mod-perl apache-ssl
Architecture: source all i386
Version: 1.3.28-3
Distribution: unstable
Urgency: low
Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org>
Changed-By: Fabio M. Di Nitto <fabbione@fabbione.net>
Description:
apache - Versatile, high-performance HTTP server
apache-common - Support files for all Apache webservers
apache-dev - Apache webserver development kit
apache-doc - Apache webserver docs
apache-perl - Versatile, high-performance HTTP server with Perl support
apache-ssl - Versatile, high-performance HTTP server with SSL support
libapache-mod-perl - Integration of perl with the Apache web server
Closes: 214525 214966 215011 215047
Changes:
apache (1.3.28-3) unstable; urgency=low
.
* (Fabio M. Di Nitto)
- Fixed suexec handling in apache{-perl,-ssl}.config
- Fixed detection of multiple entries in config files (Closes: #214966)
- Finished to applies suggestions about templates (Closes: #214525)
(thanks to Christian Perrier)
- Fixed modules-config to use LANG=C while parsing modules list that
should prevent arbitrary reordering of the list.
(Closes: #215047)
- Fixed parsing of Port (Closes: #215011)
Files:
af03eeaa7a661788c69487169ada166b 1017 web optional apache_1.3.28-3.dsc
4ba409938c5681b13f5f6cd64e6e1a0e 414504 web optional apache_1.3.28-3.diff.gz
bf15334c252e393a4f72e8e951b1a374 1099946 doc optional apache-doc_1.3.28-3_all.deb
a62f00b055db9cf85b738fcd5b50704b 357562 web optional apache_1.3.28-3_i386.deb
790ec65be16cc5af073af676156d1adb 404362 web optional apache-ssl_1.3.28-3_i386.deb
6eea760b0103a2e424bcf536f64f1cc9 472230 web extra apache-perl_1.3.28-3_i386.deb
0b21588e80074912058187684cd1da09 1661656 devel extra apache-dev_1.3.28-3_i386.deb
d3be47edf3a8b2a00a8f3fa08f4f22b1 836402 web optional apache-common_1.3.28-3_i386.deb
c23e3c1a7154519d39890688f7209ec7 470248 web optional libapache-mod-perl_1.28-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQE/hq/rhCzbekR3nhgRAveNAKCg2GFXHlI13j0WBtVBa3xQaBOswQCgk7NH
VwP7vM7/uQ8m1V95J6DAF1E=
=NvPY
-----END PGP SIGNATURE-----
Reply to: