cgi script with "SSLOptions +StdEnvVars" fails
am 25.06.2002 16:07:34 von Moeller Wolf-DietrichExecuting scripts on my Apache2 leads to the following error log lines
(example):
[Tue Jun 25 15:13:07 2002] [error] [client 127.0.0.1] (22)Invalid
argument: couldn't create child process: 22: E:/Web/cgi-bin/test.pl
[Tue Jun 25 15:13:07 2002] [error] [client 127.0.0.1] (22)Invalid
argument: couldn't spawn child process: E:/Web/cgi-bin/test.pl
If I remove the "SSLOptions +StdEnvVars" from ssl.conf, all scripts work
fine. (Executing scripts on any other virtual host without ssl also works
fine).
Does anyone have a clue? or is it a mod_ssl bug?
-------------------------
System: WinNT 4.0 SP6a, Apache installed from
"Apache-2.0.39-Mod_SSL-OpenSSL-0.9.6d-Win32.zip" from
"http://www.modssl.org/contrib/"
httpd.conf (snippet) and ssl.conf:
-------------------------
ScriptAlias /cgi-bin/ "E:/Web/cgi-bin/"
AllowOverride Limit
Order allow,deny
Allow from all
-------------------------
Listen 443
NameVirtualHost *:443
SSLSessionCache dbm:logs/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex sem
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
ServerName localhost
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL
SSLCertificateFile conf/ssl/server.cert
SSLCertificateKeyFile conf/ssl/server.key
AllowOverride Limit
SSLOptions +StdEnvVars
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
-------------------------
----------------------------------------
Dr. Wolf-Dietrich Moeller
Siemens AG, CT IC 3, D-81730 München
Corporate Technology Department Security
Mch P, Tel. +49 89 636-53391, Fax -48000
wolf-dietrich.moeller@siemens.com
Intranet https://security.ct.siemens.de/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org