Solved

SSL Library error

Posted on 2008-10-29
2
1,552 Views
Last Modified: 2010-10-05
From few months I face SSL crashes on my web server. After the crash, SSL connection is not working and I have to restart apache. It is hard to track it, because it happens randomly. I attach part of ssl log from the time SSL is down. I digged up in the internet looking for this error, but couldn't find exactly the same.

According to log's 'malloc failure' info, you might find useful my computer memory amount, it's 8GB.
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection to child 104 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] (os 0x1b5fcdb0)Unrecognized Win32 error code 459263408: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 217.157.174.28] Connection closed to child 104 with abortive shutdown (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection to child 283 established (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] Seeding PRNG with 136 bytes of entropy
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Thu Sep 18 21:09:09 2008] [debug] ssl_engine_kernel.c(1789): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] (os 0x28867360)Unrecognized Win32 error code 679900000: SSL library error 1 in handshake (server www.myplace.com:443)
[Thu Sep 18 21:09:09 2008] [info] SSL Library Error: 336183361 error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
[Thu Sep 18 21:09:09 2008] [info] [client 212.17.141.57] Connection closed to child 283 with abortive shutdown (server www.myplace.com:443)

Open in new window

0
Comment
Question by:szczecin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
sr1xxon earned 500 total points
ID: 22831007
probably an issue with your openssl implementation - slow memory leak - relating to memory allocation (trying to re-use an in-use section of memory), NOT total memory available.

what version of openssl are you using - did you build it from source? This could be resolved by a later version of openssl.
alternatively, there could be a problem with the program calling the ssl routine - freeradius and dovecot both displayed exactly these errors, which were resolved in later releases.




0
 

Author Comment

by:szczecin
ID: 22833759
It is OpenSSL 0.9.8h. No, I did not build it from the scratch (btw. it runs under windows 2003). Yes, I have seen in some related post about similar problem it was in connection with freeradius and dovecot, but I do not use any of them. OpenSSL works under Apache 2.2.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Imagine a situation that you have installed SSL (http://en.wikipedia.org/wiki/Secure_Sockets_Layer) Certificate on your Cisco ASA (Cisco Adaptive Security Appliance) firewall. Installation of SSL certificate on ASA is an another topic for which you …
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question