Bug#222217: apache2-common: Broken after upgrade 2.0.47 -> 2.0.48
Hi again,
somehow it seems like Apache is trying to create ssl_scache twice? I
might be totally wrong about this, but the error output from the logs
seem to be quite odd. Could it be that OpenSSL cant get enough entropy
to successfully initialize a new ssl_scache? urandom vs random
problem? Filesystem corruption that makes the ssl_scache seem like its
there, but its not? Again, Im just suggesting possible reasons out of
the blue here. :)
I would like to point out that its actually possible to start up
Apache roughly 1 out of 20 times (only had success with apache2 -X and
not using the init-script - though Ive tried many more times not using
the script).
### WORKING
[...]
open("/var/log/apache2/ssl_mutex.11986", O_WRONLY|O_CREAT|O_EXCL,
0644) = 15
unlink("/var/log/apache2/ssl_mutex.11986") = 0
geteuid32() = 0
open("/var/log/apache2/ssl_scache", O_WRONLY|O_CREAT|O_EXCL, 0666) =
16
stat64("/var/log/apache2/ssl_scache", {st_mode=S_IFREG|0600,
st_size=0, ...}) = 0
shmget(16841169, 128000, IPC_CREAT|IPC_EXCL|0600) = 1671176
shmat(1671176, 0, 0) = 0x4059c000
shmctl(1671176, IPC_64|IPC_STAT, 0xbffff690) = 0
getuid32() = 0
getgid32() = 0
[...]
>From the logs (ssl.log) to go with this successfull run:
[Mon Dec 01 02:53:48 2003] [info] Init: Initializing OpenSSL library
[Mon Dec 01 02:53:48 2003] [info] Init: Seeding PRNG with 512 bytes of
entropy
[Mon Dec 01 02:53:48 2003] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[Mon Dec 01 02:53:49 2003] [info] Init: Generating temporary DH
parameters (512/1024 bits)
[Mon Dec 01 02:53:49 2003] [info] Init: Initializing (virtual) servers
for SSL
[Mon Dec 01 02:53:49 2003] [info] Server: Apache/2.0.48, Interface:
mod_ssl/2.0.48, Library: OpenSSL/0.9.7c
[Mon Dec 01 02:53:49 2003] [info] Init: Initializing OpenSSL library
[Mon Dec 01 02:53:49 2003] [info] Init: Seeding PRNG with 512 bytes of
entropy
[Mon Dec 01 02:53:49 2003] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[Mon Dec 01 02:53:51 2003] [info] Init: Generating temporary DH
parameters (512/1024 bits)
[Mon Dec 01 02:53:51 2003] [info] Shared memory session cache
initialised
[Mon Dec 01 02:53:51 2003] [info] Init: Initializing (virtual) servers
for SSL
[Mon Dec 01 02:53:51 2003] [info] Server: Apache/2.0.48, Interface:
mod_ssl/2.0.48, Library: OpenSSL/0.9.7c
[Mon Dec 01 02:53:51 2003] [warn] pid file /var/run/apache2.pid
overwritten -- Unclean shutdown of previous Apache run?
### NOT WORKING
[...]
open("/var/log/apache2/ssl_mutex.12054", O_WRONLY|O_CREAT|O_EXCL,
0644) = 15
unlink("/var/log/apache2/ssl_mutex.12054") = 0
geteuid32() = 0
open("/var/log/apache2/ssl_scache", O_WRONLY|O_CREAT|O_EXCL, 0666) =
16
stat64("/var/log/apache2/ssl_scache", {st_mode=S_IFREG|0600,
st_size=0, ...}) = 0
shmget(16841170, 128000, IPC_CREAT|IPC_EXCL|0600) = -1 EEXIST (File
exists)
gettimeofday({1070243846, 832424}, NULL) = 0
write(11, "[Mon Dec 01 02:57:26 2003] [erro"..., 82) = 82
exit_group(1) = ?
And what is showing up in the logs (ssl.log). Notice the matching
[error], that seems to refer to ssl_scache:
[Mon Dec 01 02:57:24 2003] [info] Init: Initializing OpenSSL library
[Mon Dec 01 02:57:24 2003] [info] Init: Seeding PRNG with 512 bytes of
entropy
[Mon Dec 01 02:57:24 2003] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[Mon Dec 01 02:57:25 2003] [info] Init: Generating temporary DH
parameters (512/1024 bits)
[Mon Dec 01 02:57:25 2003] [info] Init: Initializing (virtual) servers
for SSL
[Mon Dec 01 02:57:25 2003] [info] Server: Apache/2.0.48, Interface:
mod_ssl/2.0.48, Library: OpenSSL/0.9.7c
[Mon Dec 01 02:57:25 2003] [info] Init: Initializing OpenSSL library
[Mon Dec 01 02:57:25 2003] [info] Init: Seeding PRNG with 512 bytes of
entropy
[Mon Dec 01 02:57:25 2003] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[Mon Dec 01 02:57:26 2003] [info] Init: Generating temporary DH
parameters (512/1024 bits)
[Mon Dec 01 02:57:26 2003] [error] Cannot allocate shared memory:
(17)File exists
.h
--
Henrik Holmboe, Stockholm Sweden
<http://elements.hack.se/contact/>
Reply to: