Re: FreeBSD 5.1-p10 reproducible crash with Apache2
From: Kris Kennaway (kris_at_obsecurity.org)
Date: 10/30/03
- Previous message: Scott Long: "Re: java binary incompatibility on 5.x (Re: __fpclassifyd problem)"
- In reply to: QBranko_F=2E_Gra=E8nar=22?=: "FreeBSD 5.1-p10 reproducible crash with Apache2"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Wed, 29 Oct 2003 21:05:40 -0800 To: "Branko F. Gra?nar" <bfg@noviforum.si>
On Wed, Oct 29, 2003 at 11:37:56AM +0100, "Branko F. Gra?nar" wrote:
> Hi.
>
> FreeBSD 5.1-p10 (and also possible other 5.1-pX version) can be remotely
> locked up if the following criteria is met:
>
> + apache2 has mod_ssl loaded and enabled
> + apache2 has the following configuration directives set to the
> following values:
>
> SSLMutex sem
> SSLSessionCache shm:/some/file(1048576)
>
> + client connects via SSL/TLS to apache fast enough.
>
> If all conditions above are satisfied except the last one, then lockup
> doesn't happen.
>
> I tested on three 5.1-p10 machines (SMP, uniprocessor, uniprocessor with
> hypterthreading) with JMeter 1.9.1.
>
> It is possible lockup machine with 100 requests (1 concurrent request)
> in 1-3 seconds.
>
> If SSLMutex is set to file:/path/somewhere and SSLSessionCache is set to
> dbm:/some/dbm lockup does not accour.
>
> Linux 2.4.22 is not affected by this issue.
>
> Details:
What kernel configuration? What hardware?
Kris
- application/pgp-signature attachment: stored
- Previous message: Scott Long: "Re: java binary incompatibility on 5.x (Re: __fpclassifyd problem)"
- In reply to: QBranko_F=2E_Gra=E8nar=22?=: "FreeBSD 5.1-p10 reproducible crash with Apache2"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
|
