[distcache-users] Re: Followup to Jake Appelbaum's report.

[C. S. A. <cs...@cs...>]

[Resending this without the complete log, in order to get it onto the list
in a timely fashion.]

Here's the additional information.  Note that distcache is *not* turned on in 
this trace (ie, there is no SSLSessionCache dc:... line), but it seems to be 
being invoked anyway (note the output by ssl_scache_dc.c), which explains why 
turning distcache off doesn't solve the problem, only removing the patch to 
apache fixes it.

The key lines are the ones about 'bad file descriptor'; these are generated 
when apache is dropping connections.

The short log excerpt is appended; a fuller log excerpt is attached.
[Will be attached when the message gets moderated through.]
I haven't done any internal edits to these.
--scott

Diplomat LCPANGS DTFROGS SECANT Noriega KMFLUSH TASS AMTHUG LITEMPO
   Register to vote!  http://www.yourvotematters.org/VerifiedVoting
                         ( http://cscott.net/ )

[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_scache_dc.c(139): distributed scache 'get_session' MISS
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1602): Inter-Process Session Cache: request=GET status=MISSED id=17F3196234E613FFB220F38A277407971FE5466447DE046039F0FA76E200EF18 (session renewal)
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 read client hello A
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 write server hello A
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 write certificate A
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1148): handing out temporary 1024 bit DH key
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 write key exchange A
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 write server done A
[Tue Oct 26 12:14:33 2004] [info] (9)Bad file descriptor: core_output_filter: writing data to the network
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1764): OpenSSL: Loop: SSLv3 flush data
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_io.c(1517): OpenSSL: I/O error, 5 bytes expected to read on BIO#8223ea0 [mem: 8212268]
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1793): OpenSSL: Exit: error in SSLv3 read client certificate A
[Tue Oct 26 12:14:33 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1793): OpenSSL: Exit: error in SSLv3 read client certificate A
[Tue Oct 26 12:14:33 2004] [info] (9)Bad file descriptor: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]
[Tue Oct 26 12:14:33 2004] [info] Connection to child 0 closed with abortive shutdown(server voteprotect.org:443, client 128.30.5.114)
[Tue Oct 26 12:14:44 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_io.c(1517): OpenSSL: I/O error, 5 bytes expected to read on BIO#81b2f18 [mem: 8249630]
[Tue Oct 26 12:14:44 2004] [info] (70007)The timeout specified has expired: SSL input filter read failed.
[Tue Oct 26 12:14:44 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1774): OpenSSL: Write: SSL negotiation finished successfully
[Tue Oct 26 12:14:44 2004] [info] Connection to child 5 closed with standard shutdown(server www.voteprotect.org:443, client 128.30.5.114)
[Tue Oct 26 12:14:44 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_io.c(1517): OpenSSL: I/O error, 5 bytes expected to read on BIO#81b2f18 [mem: 827ed48]
[Tue Oct 26 12:14:44 2004] [info] (70007)The timeout specified has expired: SSL input filter read failed.
[Tue Oct 26 12:14:44 2004] [debug] /usr/src/APACHE/apache2-2.0.52/build-tree/apache2/modules/ssl/ssl_engine_kernel.c(1774): OpenSSL: Write: SSL negotiation finished successfully
[Tue Oct 26 12:14:44 2004] [info] Connection to child 3 closed with standard shutdown(server www.voteprotect.org:443, client 128.30.5.114)