#1011 SSL support in 1.070 is broken ??

[Anonymous]

Uopn upgrading to 1.070 from 1.060 the SSL support
being enabled is causing a resource race ( I assume
this is the correct term? ). CPU usage on miniserv.pl
and on perl itself skyrockets to 97% and the RAM is
quickly overwhelmed and swap usage rises to 100%. First
time this happened a hard reset on the server was
required as you could not even log into the system to
kill the process. Subsequent attempts to install it
with SSL support also duplicated the problem. Using it
without SSL works fine, but this is insecure at best.
Running on Redhat 8.0 with the latest kernel and other
updates applied.

Attempting to revert back to 1.060 after having done
this upgrade also results in failure.

[Jamie Cameron]

Logged In: YES
user_id=129364

If the problem happens even under 1.060 then it probably
isn't related to the upgrade, especially since the two
versions hardly differ. Was OpenSSL on your system maybe
upgraded not long before? The upgrade wouldn't effect webmin
until it is re-started ..

[Scott Benson]

Logged In: YES
user_id=702973

Have you upgraded OpenSSL? Yeap, problems won't show until a
restart of webmin.

If you have, try recompiling the Net::SSLeay perl module.

I had this problem after I went to OpenSSL 0.9.7 from 0.9.6
with Redhat. Not just Net::SSLeay though - I had to
recompile a bunch of stuff.. :-)

[Nobody/Anonymous]

Logged In: NO

Yep. Was upgraded recently in fact. to 0.9.7 even.
Unfortunately because of the hell I had to go through to do
so I'm not about to reverse that. I'm also not about to be
logging in using Webmin without the SSL. So it seems I've
reached an impasse for now. Attempting to upgrade the
Net::SSLeay module also failed. It's whining about compiler
versions not being the same, which I personally find rather
amusing. Such a wonderful OS. Can't even perform a simply
upgrade without something bizarre and stupid happening :P

[Scott Benson]

Logged In: YES
user_id=702973

I can't remember if I got that error, but you might be able
to safely force the install. Not sure though so don't blame
me if your system explodes. :-)

For everything else that needed re-compiling I ended up
using the SRPMS (grrrr - RPMS can be such a pain). Had to
installing the resulting .rpm's with --nodeps because they
will complain about the OpenSSL 0.9.7 packages not being
installed.