[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

SSL Library error

Posted on 2008-10-29
2
Medium Priority
?
1,729 Views
Last Modified: 2010-10-05
From few months I face SSL crashes on my web server. After the crash, SSL connection is not working and I have to restart apache. It is hard to track it, because it happens randomly. I attach part of ssl log from the time SSL is down. I digged up in the internet looking for this error, but couldn't find exactly the same.

According to log's 'malloc failure' info, you might find useful my computer memory amount, it's 8GB.
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection to child 104 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] (os 0x1b5fcdb0)Unrecognized Win32 error code 459263408: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection closed to child 104 with abortive shutdown (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection to child 283 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] (os 0x28867360)Unrecognized Win32 error code 679900000: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection closed to child 283 with abortive shutdown (server www.myplace.com:443)

Open in new window

0
Comment
Question by:szczecin
2 Comments
 
LVL 6

Accepted Solution

by:
sr1xxon earned 1500 total points
ID: 22831007
probably an issue with your openssl implementation - slow memory leak - relating to memory allocation (trying to re-use an in-use section of memory), NOT total memory available.

what version of openssl are you using - did you build it from source? This could be resolved by a later version of openssl.
alternatively, there could be a problem with the program calling the ssl routine - freeradius and dovecot both displayed exactly these errors, which were resolved in later releases.




0
 

Author Comment

by:szczecin
ID: 22833759
It is OpenSSL 0.9.8h. No, I did not build it from the scratch (btw. it runs under windows 2003). Yes, I have seen in some related post about similar problem it was in connection with freeradius and dovecot, but I do not use any of them. OpenSSL works under Apache 2.2.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As Wikipedia explains 'robots.txt' as -- the robot exclusion standard, also known as the Robots Exclusion Protocol or robots.txt protocol, is a convention to prevent cooperating web spiders and other web robots from accessing all or part of a websit…
If you are running a LAMP infrastructure, this little code snippet is very helpful if you are serving lots of HTML, JavaScript and CSS-related information. The mod_deflate module, which is part of the Apache 2.2 application, provides the DEFLATE…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…
Get the source code for a fully functional Access application shell with several popular security features that Access VBA application developers desire, but find difficult or impossible to figure out how to code. You get the source code for managi…
Suggested Courses

590 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question