Solved

SSL Library error

Posted on 2008-10-29
2
1,479 Views
Last Modified: 2010-10-05
From few months I face SSL crashes on my web server. After the crash, SSL connection is not working and I have to restart apache. It is hard to track it, because it happens randomly. I attach part of ssl log from the time SSL is down. I digged up in the internet looking for this error, but couldn't find exactly the same.

According to log's 'malloc failure' info, you might find useful my computer memory amount, it's 8GB.
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection to child 104 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] (os 0x1b5fcdb0)Unrecognized Win32 error code 459263408: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection closed to child 104 with abortive shutdown (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection to child 283 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] (os 0x28867360)Unrecognized Win32 error code 679900000: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection closed to child 283 with abortive shutdown (server www.myplace.com:443)

Open in new window

0
Comment
Question by:szczecin
2 Comments
 
LVL 6

Accepted Solution

by:
sr1xxon earned 500 total points
ID: 22831007
probably an issue with your openssl implementation - slow memory leak - relating to memory allocation (trying to re-use an in-use section of memory), NOT total memory available.

what version of openssl are you using - did you build it from source? This could be resolved by a later version of openssl.
alternatively, there could be a problem with the program calling the ssl routine - freeradius and dovecot both displayed exactly these errors, which were resolved in later releases.




0
 

Author Comment

by:szczecin
ID: 22833759
It is OpenSSL 0.9.8h. No, I did not build it from the scratch (btw. it runs under windows 2003). Yes, I have seen in some related post about similar problem it was in connection with freeradius and dovecot, but I do not use any of them. OpenSSL works under Apache 2.2.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question