Internet Explorer SSL 使用导致段错误 - apr_uri_parse 中的 Apache httpd SIGSEGV

Internet Explorer SSL 使用导致段错误 - apr_uri_parse 中的 Apache httpd SIGSEGV

最近,我在中遇到了大量以下错误error_log

我发现当有人使用 SSLhttps:和 Internet Explorer 浏览我的网站时会发生这种情况,而其他所有浏览器都正常。

[Fri Nov 29 20:44:41.318847 2013] [core:notice] [pid 2307] AH00051: child pid 7504 exit signal Segmentation fault (11), possible coredump in /tmp/core-dump
[Fri Nov 29 20:44:41.318937 2013] [core:notice] [pid 2307] AH00051: child pid 7623 exit signal Segmentation fault (11), possible coredump in /tmp/core-dump
[Fri Nov 29 20:44:43.324859 2013] [core:notice] [pid 2307] AH00051: child pid 7724 exit signal Segmentation fault (11), possible coredump in /tmp/core-dump

我启用了核心转储并在核心转储文件上运行了 GDB:

GDB 分析核心转储文件

Core was generated by `/usr/local/apache/bin/httpd -k start -DSSL'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007fcc9b259798 in apr_uri_parse () from /usr/local/apache/lib/libaprutil-1.so.0

回溯

#0  0x00007fcc9b259798 in apr_uri_parse () from /usr/local/apache/lib/libaprutil-1.so.0
#1  0x00000000004f1e09 in stapling_renew_response ()
#2  0x00000000004f2f58 in stapling_cb ()
#3  0x0000003f4022b431 in ssl_check_clienthello_tlsext () from /usr/lib64/libssl.so.10
#4  0x0000003f4021b9e5 in ssl3_get_client_hello () from /usr/lib64/libssl.so.10
#5  0x0000003f4021db6f in ssl3_accept () from /usr/lib64/libssl.so.10
#6  0x0000003f402290d9 in ssl23_get_client_hello () from /usr/lib64/libssl.so.10
#7  0x0000003f402298b3 in ssl23_accept () from /usr/lib64/libssl.so.10
#8  0x00000000004dc63c in ssl_io_filter_handshake ()
#9  0x00000000004dd641 in ssl_io_filter_input ()
#10 0x000000000043e61c in ap_get_brigade ()
#11 0x0000000000440d8e in ap_rgetline_core ()
#12 0x000000000044161f in read_request_line ()
#13 0x0000000000442e30 in ap_read_request ()
#14 0x0000000000497045 in ap_process_http_sync_connection ()
#15 0x00000000004970a3 in ap_process_http_connection ()
#16 0x000000000046ba8f in ap_run_process_connection ()
#17 0x000000000046bf66 in ap_process_connection ()
#18 0x000000000051c378 in child_main ()
#19 0x000000000051c58e in make_child ()
#20 0x000000000051c943 in perform_idle_server_maintenance ()
#21 0x000000000051d0b5 in prefork_run ()
#22 0x000000000043bf35 in ap_run_mpm ()
#23 0x000000000043423c in main ()

该错误以某种方式与 SSL 设置有关,我正在运行 Apache 2.4.7。mod_ssl,配置文件中是否有任何内容需要我更改?


Apache 重启 SSL 错误

我注意到如果我重新启动 Apache 则我会看到以下内容error_log,它们有关联吗?

[Sun Dec 01 17:37:58.545564 2013] [ssl:error] [pid 8484] AH02218: ssl_stapling_init_cert: no responder URL

更新

如果我将 Apache 降级到 2.2,则此错误就会停止。

相关内容