[Modules] [users at httpd] Trouble using mod_proxy with mod_gnutls

[Guillaume Rousse]

Guillaume Rousse a écrit :
> Guillaume Rousse a écrit :
>> Hello list.
>>
>> With the following configuration, mod_proxy works perfectly in the
>> non-ssl vhost, but not in the ssl one. The client hangs a long
>> time for an answer, which finally comes as "Site error" message, with a
>> "404 858" error status in the logs. The waiting time before the error
>> occurs is superior to mod_proxy timeout configuration.
> I forgot: this is happening under Linux, with apache 2.2.3 and 2.2.6.
Here are more informations.

The first one is a tcpdump capture of a successful connection on non-ssl
vhost (out1), and another capture of an unsuccessful one on ssl host (out2).
195.83.212.55 is the client
193.55.250.2 is the frontal web server
193.55.250.161 is the proxied web server

In the unsuccessful case, the frontal web server initiate TCP connection
with the proxied one, and then doesn't send anything, whereas it
immediatly send a GET request when everything works.

The second piece of information is gdb output when process is hanging.
it seems an error handler is invoked in mod_proxy, making mod_gnutls
wait infinitely on a socket

#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb7b2248b in poll () from /lib/i686/libc.so.6
#2  0xb7bd9a4c in apr_wait_for_io_or_timeout () from /usr/lib/libapr-1.so.0
#3  0xb7bd4100 in apr_socket_recv () from /usr/lib/libapr-1.so.0
#4  0xb7f40042 in apr_dso_error () from /usr/lib/libaprutil-1.so.0
#5  0x08075103 in ap_core_input_filter ()
#6  0xb754ec33 in mgs_transport_read () from
/etc/httpd/extramodules/mod_gnutls.so
#7  0xb747f557 in apr_dso_error () from /usr/lib/libgnutls.so.26
#8  0xb747fa37 in _gnutls_io_read_buffered () from /usr/lib/libgnutls.so.26
#9  0xb747cabb in _gnutls_recv_int () from /usr/lib/libgnutls.so.26
#10 0xb747ffa6 in _gnutls_handshake_io_recv_int () from
/usr/lib/libgnutls.so.26
#11 0xb7484ab4 in _gnutls_recv_handshake () from /usr/lib/libgnutls.so.26
#12 0xb7485bd4 in _gnutls_handshake_server () from /usr/lib/libgnutls.so.26
#13 0xb74860ff in gnutls_handshake () from /usr/lib/libgnutls.so.26
#14 0xb754ed9b in apr_dso_error () from
/etc/httpd/extramodules/mod_gnutls.so
#15 0xb754f238 in mgs_filter_output () from
/etc/httpd/extramodules/mod_gnutls.so
#16 0xb79b9cdc in apr_dso_error () from /etc/httpd/modules/mod_proxy_http.so
#17 0xb79bbbee in apr_dso_error () from /etc/httpd/modules/mod_proxy_http.so
#18 0xb79c2413 in proxy_run_scheme_handler () from
/etc/httpd/modules/mod_proxy.so
#19 0xb79c6028 in apr_dso_error () from /etc/httpd/modules/mod_proxy.so
#20 0x080756a6 in ap_run_handler ()
#21 0x08078b97 in ap_invoke_handler ()
#22 0x08083d40 in ap_process_request ()
#23 0x0808111a in ?? ()
#24 0x0807ccb6 in ap_run_process_connection ()
#25 0x08087e41 in ?? ()
#26 0x080881b8 in ?? ()
#27 0x08088274 in ?? ()
#28 0x08088e50 in ap_mpm_run ()
#29 0x08062d02 in main ()


-- 
Guillaume Rousse
Moyens Informatiques - INRIA Futurs
Tel: 01 69 35 69 62