Topic: Apache 2.2.25 for Windows msi, issues after OpenSSL Upgrade

[syuen]

As I could not find an official upgrade/patch for Apache 2.2.25 to patch the heartbleed issue with OpenSSL, I have attempted to upgrade OpenSSL 1.0.1h using these methods (by means of replacing a few DLLs):

http://www.dunhamtech.com/?p=351
http://www.swingleton.com/blog/2014/04/patching-openssl-on-windows-running-apache-fixing-the-heartbleed-bug/

Apache service starts and most things work, however when the SSL site is accessed via IE, Apache crashes and self-restarts, Apache works perfectly if I undo the SSL DLL changes.

The logs don't give me very good indication of what went wrong, but here they are:

=================================
apache error.log

[Fri Aug 08 16:13:21 2014] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Fri Aug 08 16:13:21 2014] [notice] Child 2660: Exit event signaled. Child process is ending.
[Fri Aug 08 16:13:22 2014] [notice] Child 2660: Released the start mutex
[Fri Aug 08 16:13:51 2014] [notice] Parent: Forcing termination of child process 1fc
[Fri Aug 08 17:08:41 2014] [notice] Apache/2.2.25 (Win32) mod_ssl/2.2.25 OpenSSL/0.9.8y configured -- resuming normal operations
[Fri Aug 08 17:08:41 2014] [notice] Server built: Jul 10 2013 01:52:12
[Fri Aug 08 17:08:41 2014] [notice] Parent: Created child process 1368
[Fri Aug 08 17:08:41 2014] [notice] Child 1368: Child process is running
[Fri Aug 08 17:08:41 2014] [notice] Oracle WebLogic plugin build date/time: Aug 2 2010 09:40:28. Change Number: 1351550
[Fri Aug 08 17:08:41 2014] [notice] Child 1368: Acquired the start mutex.
[Fri Aug 08 17:08:41 2014] [notice] Child 1368: Starting 64 worker threads.
[Fri Aug 08 17:08:41 2014] [notice] Child 1368: Starting thread to listen on port 443.

================================

Windows Event viewer

Faulting application name: httpd.exe, version: 2.2.25.0, time stamp: 0x51dd049c
Faulting module name: SSLEAY32.dll, version: 1.0.1.8, time stamp: 0x53914206
Exception code: 0xc0000005
Fault offset: 0x000236f1
Faulting process id: 0x2bc
Faulting application start time: 0x01cfb322c54649b4
Faulting application path: D:\Apache\2.2\bin\httpd.exe
Faulting module path: D:\Apache\2.2\bin\SSLEAY32.dll
Report Id: 0354dbcc-1f16-11e4-ab2c-005056b07a3a


I was wondering if anyone has experienced this before? Do you think there's another workaround?

[admin]

There is some not fine with your used methods:

Apache/2.2.25 (Win32) mod_ssl/2.2.25 OpenSSL/0.9.8y configured

versus

Faulting module name: SSLEAY32.dll, version: 1.0.1.8

Be careful with methods from non "official" trusted sources.

Upgrade to 2.2.27 from the download pages here.

[syuen]

Just replying back to this thread to say that your suggestion to update Apache with the 2.2.27 (from your download page) has worked successfully.