Apache + MOD_SSL Win32 crash

This is a multi-part message in MIME format.

------=_NextPart_000_0061_01C20260.9590DC90
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello,
I'm running Apache 1.3.24 with MOD_SSL 2.8.8 on a Windows 2000 server.

I've installed and configured according to the "Apache + SSL on Win32 =
Howto" and I've =
gotten a certificate from Thawte. I can and always have been able to =
make an (unsecure) http hit on the server. I can also make a secure =
https hit. However, if I reload the secure page a few times, sooner or =
later Apache crashes.

The error message that pops up says "Apache.exe has generated errors and =
will be closed by Windows. You will need to restart the program. An =
error log is being created." The Windows error log says it was an access =
violation and gives a stack dump, which I don't know how to read. The =
Apache error log and the SSL log are free of errors.

When starting Apache, the only complaint I was getting from the config =
file was:
"Cannot add module via name 'mod_ssl.c': not in list of loaded modules"
so I've commented that line out.

Does anyone have any suggestions?


These are the relevant lines in httpd.conf:

### (other AddModules) ###
#AddModule mod_ssl.c
....

### (other LoadModules) ###
LoadModule ssl_module modules/mod_ssl.so
....

Listen 80
Listen 443
....

SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none

SSLLog logs/SSL.log
SSLLogLevel info


DocumentRoot c:/...
ServerName www.mydomain.com

....

### (many other VirtualHosts) ###


SSLEngine On
SSLCertificateFile conf/ssl/pubkey.cert
SSLCertificateKeyFile conf/ssl/prvkey.key
DocumentRoot c:/...
ServerName www.mydomain.com



-------------------------------------------------
Mike Campbell Aktiv Software Corporation
mcampbell@aktiv.com http://www.aktiv.com
(250) 708-0027


------=_NextPart_000_0061_01C20260.9590DC90
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



charset=3Diso-8859-1">

Re: Apache + MOD_SSL Win32 crash

What else might be running on this system? If it were me, I'd move
everything to a solid unix based system. Widows does not play well with
others, not ready for prime time, but, that's me.

Thanks,

Ron DuFresne

On Thu, 23 May 2002, Mike Campbell wrote:

> Hello,
> I'm running Apache 1.3.24 with MOD_SSL 2.8.8 on a Windows 2000 server.
>
> I've installed and configured according to the "Apache + SSL on Win32 Howto" and I've gotten a certificate from Thawte. I can and always have been able to make an (unsecure) http hit on the server. I can also make a secure https hit. However, if I reload the secure page a few times, sooner or later Apache crashes.
>
> The error message that pops up says "Apache.exe has generated errors and will be closed by Windows. You will need to restart the program. An error log is being created." The Windows error log says it was an access violation and gives a stack dump, which I don't know how to read. The Apache error log and the SSL log are free of errors.
>
> When starting Apache, the only complaint I was getting from the config file was:
> "Cannot add module via name 'mod_ssl.c': not in list of loaded modules"
> so I've commented that line out.
>
> Does anyone have any suggestions?
>
>
> These are the relevant lines in httpd.conf:
>
> ### (other AddModules) ###
> #AddModule mod_ssl.c
> ...
>
> ### (other LoadModules) ###
> LoadModule ssl_module modules/mod_ssl.so
> ...
>
> Listen 80
> Listen 443
> ...
>
> SSLMutex sem
> SSLRandomSeed startup builtin
> SSLSessionCache none
>
> SSLLog logs/SSL.log
> SSLLogLevel info
>
>
> DocumentRoot c:/...
> ServerName www.mydomain.com
>
> ...
>
> ### (many other VirtualHosts) ###
>
>
> SSLEngine On
> SSLCertificateFile conf/ssl/pubkey.cert
> SSLCertificateKeyFile conf/ssl/prvkey.key
> DocumentRoot c:/...
> ServerName www.mydomain.com
>
>
>
> -------------------------------------------------
> Mike Campbell Aktiv Software Corporation
> mcampbell@aktiv.com http://www.aktiv.com
> (250) 708-0027
>
>

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com

"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
-- Johnny Hart

testing, only testing, and damn good at it too!

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache + MOD_SSL Win32 crash

That sounds like the ssl mutex mechanism not working properly. Not sure
whether anyones got it working on win32 and mod_ssl on win32 is still
listed as an alpha release.

I too would choose to ditch windows, but if you do need it, then you
should try apache 2 at least the asf say its production quality on win32
- not sure if there are precompiled win32 binaries with ssl though.

Mike Campbell wrote:

> Hello,
> I'm running Apache 1.3.24 with MOD_SSL 2.8.8 on a Windows 2000 server.
>
> I've installed and configured according to the "Apache + SSL on Win32
> Howto" and I've
> gotten a certificate from Thawte. I can and always have been able to
> make an (unsecure) http hit on the server. I can also make a secure
> https hit. However, if I reload the secure page a few times, sooner or
> later Apache crashes.
>
> The error message that pops up says "Apache.exe has generated errors
> and will be closed by Windows. You will need to restart the program.
> An error log is being created." The Windows error log says it was an
> access violation and gives a stack dump, which I don't know how to
> read. The Apache error log and the SSL log are free of errors.
>
> When starting Apache, the only complaint I was getting from the config
> file was:
> "Cannot add module via name 'mod_ssl.c': not in list of loaded modules"
> so I've commented that line out.
>
> Does anyone have any suggestions?
>
>
> These are the relevant lines in httpd.conf:
>
> ### (other AddModules) ###
> #AddModule mod_ssl.c
> ...
>
> ### (other LoadModules) ###
> LoadModule ssl_module modules/mod_ssl.so
> ...
>
> Listen 80
> Listen 443
> ...
>
> SSLMutex sem
> SSLRandomSeed startup builtin
> SSLSessionCache none
>
> SSLLog logs/SSL.log
> SSLLogLevel info
>
>
> DocumentRoot c:/...
> ServerName www.mydomain.com
>
> ...
>
> ### (many other VirtualHosts) ###
>
>
> SSLEngine On
> SSLCertificateFile conf/ssl/pubkey.cert
> SSLCertificateKeyFile conf/ssl/prvkey.key
> DocumentRoot c:/...
> ServerName www.mydomain.com
>
>
>
> -------------------------------------------------
> Mike Campbell Aktiv Software Corporation
> mcampbell@aktiv.com
> http://www.aktiv.com
> (250) 708-0027



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache + MOD_SSL Win32 crash

Messaggio in formato MIME composto da piy parti.

------=_NextPart_000_0054_01C20307.D45E4F00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

This (again) sounds like the keep-alive bug :=20

see

http://www.mail-archive.com/modssl-users@modssl.org/msg12969 .html

- Enrico
----- Original Message -----=20
From: Mike Campbell=20
To: modssl-users@modssl.org=20
Sent: Thursday, May 23, 2002 10:48 PM
Subject: Apache + MOD_SSL Win32 crash


Hello,
I'm running Apache 1.3.24 with MOD_SSL 2.8.8 on a Windows 2000 server.

I've installed and configured according to the "Apache + SSL on Win32 =
Howto" and I've =
gotten a certificate from Thawte. I can and always have been able to =
make an (unsecure) http hit on the server. I can also make a secure =
https hit. However, if I reload the secure page a few times, sooner or =
later Apache crashes.

The error message that pops up says "Apache.exe has generated errors =
and will be closed by Windows. You will need to restart the program. An =
error log is being created." The Windows error log says it was an access =
violation and gives a stack dump, which I don't know how to read. The =
Apache error log and the SSL log are free of errors.

When starting Apache, the only complaint I was getting from the config =
file was:
"Cannot add module via name 'mod_ssl.c': not in list of loaded =
modules"
so I've commented that line out.

Does anyone have any suggestions?
=20
=20
These are the relevant lines in httpd.conf:

### (other AddModules) ###
#AddModule mod_ssl.c
...

### (other LoadModules) ###
LoadModule ssl_module modules/mod_ssl.so
...

Listen 80
Listen 443
...

SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none

SSLLog logs/SSL.log
SSLLogLevel info


DocumentRoot c:/...
ServerName www.mydomain.com

...

### (many other VirtualHosts) ###


SSLEngine On
SSLCertificateFile conf/ssl/pubkey.cert
SSLCertificateKeyFile conf/ssl/prvkey.key
DocumentRoot c:/...
ServerName www.mydomain.com


=20
-------------------------------------------------
Mike Campbell Aktiv Software Corporation
mcampbell@aktiv.com http://www.aktiv.com
(250) 708-0027


------=_NextPart_000_0054_01C20307.D45E4F00
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



http-equiv=3DContent-Type>