Upgrade to 12.0 broke apache24 with SSL

David Newman dnewman at networktest.com
Mon Dec 31 16:57:36 UTC 2018


On 12/28/18 9:45 PM, David Newman wrote:
> 12.0-RELEASE-p1, apache24-2.4.37, openssl-1.0.2q,1
> 
> Greetings. Got an issue where apache24 installed from ports segfaults
> and dumps core after an upgrade from 11.2 to 12.0-RELEASE.
> 
> This appears to be an issue with OpenSSL. The /var/log/messages file
> just says core dumped, but running gdb on the core file produces this
> output:
> 
> # gdb /usr/local/sbin/httpd /usr/local/httpd.core
> 
> ..
> 
> Reading symbols from /usr/local/sbin/httpd...done.
> [New LWP 100270]
> Core was generated by `/usr/local/sbin/httpd -DNOHTTPACCEPT'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x0000000800bd89e3 in ?? () from /usr/local/lib/libssl.so.9
> (gdb)
> 
> The apache24 port will start normally if I run make config and disable
> SSL support.

Replying to my own question: Replacing apache24 and openssl with nginx
and libressl did the trick.

nginx also fought with openssl from ports. Same gdb termination as
above, only now from /usr/local/lib/libssl.so.46.

Switching to libressl and recompiling all ports that depended on it
cleared up this issue.

dn


> 
> I followed the normal upgrade procedure using freebsd-update and
> rebuilding all ports using the 10 steps described in the portmaster
> manpage.
> 
> I've pasted the output from apachectl -M below. Please let me know if
> you need other info.
> 
> Thanks in advance for troubleshooting clues on getting apache24 to start
> with TLS/SSL support enabled.
> 
> dn
> 
> 
> 
> # apachectl -M
> Loaded Modules:
>  core_module (static)
>  so_module (static)
>  http_module (static)
>  authn_file_module (shared)
>  authn_dbd_module (shared)
>  authn_core_module (shared)
>  authz_host_module (shared)
>  authz_groupfile_module (shared)
>  authz_user_module (shared)
>  authz_core_module (shared)
>  access_compat_module (shared)
>  auth_basic_module (shared)
>  socache_shmcb_module (shared)
>  dbd_module (shared)
>  reqtimeout_module (shared)
>  filter_module (shared)
>  mime_module (shared)
>  log_config_module (shared)
>  env_module (shared)
>  headers_module (shared)
>  setenvif_module (shared)
>  version_module (shared)
>  ssl_module (shared)
>  mpm_prefork_module (shared)
>  unixd_module (shared)
>  status_module (shared)
>  autoindex_module (shared)
>  cgi_module (shared)
>  vhost_alias_module (shared)
>  dir_module (shared)
>  alias_module (shared)
>  php7_module (shared)
>  wsgi_module (shared)
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
> 


More information about the freebsd-questions mailing list