Solved

SSL Library error

Posted on 2008-10-29
2
1,474 Views
Last Modified: 2010-10-05
From few months I face SSL crashes on my web server. After the crash, SSL connection is not working and I have to restart apache. It is hard to track it, because it happens randomly. I attach part of ssl log from the time SSL is down. I digged up in the internet looking for this error, but couldn't find exactly the same.

According to log's 'malloc failure' info, you might find useful my computer memory amount, it's 8GB.
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection to child 104 established (server www.myplace.com:443)

[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A

[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] (os 0x1b5fcdb0)Unrecognized Win32 error code 459263408: SSL library error 1 in handshake (server www.myplace.com:443)

[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure

[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection closed to child 104 with abortive shutdown (server www.myplace.com:443)

[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection to child 283 established (server www.myplace.com:443)

[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization

[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A

[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] (os 0x28867360)Unrecognized Win32 error code 679900000: SSL library error 1 in handshake (server www.myplace.com:443)

[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure

[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection closed to child 283 with abortive shutdown (server www.myplace.com:443)

Open in new window

0
Comment
Question by:szczecin
2 Comments
 
LVL 6

Accepted Solution

by:
sr1xxon earned 500 total points
ID: 22831007
probably an issue with your openssl implementation - slow memory leak - relating to memory allocation (trying to re-use an in-use section of memory), NOT total memory available.

what version of openssl are you using - did you build it from source? This could be resolved by a later version of openssl.
alternatively, there could be a problem with the program calling the ssl routine - freeradius and dovecot both displayed exactly these errors, which were resolved in later releases.




0
 

Author Comment

by:szczecin
ID: 22833759
It is OpenSSL 0.9.8h. No, I did not build it from the scratch (btw. it runs under windows 2003). Yes, I have seen in some related post about similar problem it was in connection with freeradius and dovecot, but I do not use any of them. OpenSSL works under Apache 2.2.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…
Many functions in Excel can make decisions. The most simple of these is the IF function: it returns a value depending on whether a condition you describe is true or false. Once you get the hang of using the IF function, you will find it easier to us…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now