[Modules] mod_gnutls 0.5.1 crashes Apache 2.0.58

David Schueler david.schueler at tel-billig.de
Thu Sep 18 08:34:43 EDT 2008


Hello all out there on this list.

I have a problem with mod_gnutls 0.5.1 and apache 2.0.58.
I used normal SSL on my apache before and now i want to set a different 
certificate on every vhost. So i installed mod_gnutls on my hardened 
Gentoo system using the normal "emerge" way. All compiled fine with 
gcc-3.4.6-hardened but if i enable GNUTLS the apache crashes every time 
with a segfault when a user tries to access my website, regardless if its 
a HTTP or HTTPS request. Without loading the mod_gnutls module everything 
is working well.

Here is the error log from apache:
---8<---
[Thu Sep 18 13:58:21 2008] [notice] suEXEC mechanism enabled (wrapper: 
/usr/sbin/suexec2)
[Thu Sep 18 13:58:21 2008] [notice] Digest: generating secret for digest 
authentication ...
[Thu Sep 18 13:58:21 2008] [notice] Digest: done
[Thu Sep 18 13:58:21 2008] [notice] Apache configured -- resuming normal 
operations
[Thu Sep 18 13:58:30 2008] [notice] child pid 13381 exit signal 
Segmentation fault (11)
[Thu Sep 18 13:58:30 2008] [notice] child pid 13382 exit signal 
Segmentation fault (11)
[Thu Sep 18 13:58:31 2008] [notice] child pid 13383 exit signal 
Segmentation fault (11)
[Thu Sep 18 13:58:31 2008] [notice] child pid 13384 exit signal 
Segmentation fault (11)
[Thu Sep 18 13:58:31 2008] [notice] child pid 13385 exit signal 
Segmentation fault (11)
[Thu Sep 18 13:59:16 2008] [notice] child pid 13402 exit signal 
Segmentation fault (11)
[Thu Sep 18 14:00:17 2008] [notice] child pid 13407 exit signal 
Segmentation fault (11)
[Thu Sep 18 14:00:57 2008] [notice] caught SIGTERM, shutting down
---8<---

Now my apache mod_gnutls.conf follows:
---8<---
<IfDefine GNUTLS>
LoadModule gnutls_module  modules/mod_gnutls.so
Listen *:443
GnuTLSCache dbm /var/cache/mod_gnutls/gnutls_cache
</IfDefine>
---8<---

and my vhost config looks like this:
---8<---
# SSL/TLS Configvor vhost
<VirtualHost 85.25.134.48:443>
ServerName www.wapk.de
DocumentRoot /srv/www/www.wapk.de/html
ScriptAlias /cgi-bin/ /srv/www/www.wapk.de/html/cgi-bin/
php_admin_value open_basedir /srv/www/www.wapk.de/:/usr/share/php
GnuTLSEnable on
GnuTLSCertificateFile /etc/apache2/ssl/www.wapk.de.crt
GnuTLSKeyFile /etc/apache2/ssl/server.key
GnuTLSPriorities NORMAL
</VirtualHost>
---8<---

Does someone have an idea why the apache crashes and how to solve this?

Many thanks in advance!

David



More information about the Modules mailing list