logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Apache 2.4 mod_session_crypt crashing server Page Previous  1, 2
Author
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Tue 23 Jun '15 14:37    Post subject: Reply with quote

Hi James

I just launched a cmd as admin...
then C:\Apache24\bin\httpd.exe

It crashes the same way...
Back to top
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Tue 23 Jun '15 16:48    Post subject: Reply with quote

What makes ther server crash is this line :

#SessionCryptoPassphrase mysecret

if I uncomment it, it crashes, otherwise, it works... but cookies are not encrypted...
Back to top
admin
Site Admin


Joined: 15 Oct 2005
Posts: 702

PostPosted: Tue 23 Jun '15 20:08    Post subject: Reply with quote

You can try in httpd.conf

LogLevel info session_crypto_module:debug

And let it crash.

And post at paste bin.
Back to top
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Wed 24 Jun '15 9:49    Post subject: Reply with quote

Thks again for helping me on this...

I set a full LogLevel debug

And did the same thing with and without SessionCryptoPassphrase mysecret

Starting Apache... exactly the same log for both
Loading the Auth Form ... exactly the same log for both
Submitting the form :

1st case (without SessionCryptoPassphrase), the reverse proxy does it's job and the cookies are well written.
Code:

[Wed Jun 24 09:15:40.410536 2015] [core:debug] [pid 5252:tid 984] util_cookies.c(58): [client 84.5.24.199:18604] AH00007: ap_cookie: user 'bmiot' set cookie: 'session=icCube-user=bmiot&icCube-pw=xxxxxx;path=/', referer: http://mywebsite.fr/icCube/doc/ic3report


2nd case (with SessionCryptoPassphrase), the reverse proxy does it's job but at the exact same line #, I get :
Code:
[Wed Jun 24 09:23:20.528145 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00428: Parent: child process 3504 exited with status 255 -- Restarting.


The windows error is triggered before anything appears in the apache log...
nothing about session_crypto_module in the log...

then the server restarts...
Code:
[Wed Jun 24 09:23:20.762146 2015] [ssl:warn] [pid 3880:tid 308] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Wed Jun 24 09:23:20.762146 2015] [ssl:info] [pid 3880:tid 308] AH01887: Init: Initializing (virtual) servers for SSL
[Wed Jun 24 09:23:20.762146 2015] [ssl:info] [pid 3880:tid 308] AH01876: mod_ssl/2.4.12 compiled against Server: Apache/2.4.12, Library: OpenSSL/1.0.2a
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00455: Apache/2.4.12 (Win64) OpenSSL/1.0.2a configured -- resuming normal operations
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00456: Apache Lounge VC14 Server built: May 27 2015 13:21:02
[Wed Jun 24 09:23:20.762146 2015] [core:notice] [pid 3880:tid 308] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24'
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00418: Parent: Created child process 5756
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:debug] [pid 3880:tid 308] mpm_winnt.c(422): AH00402: Parent: Sent the scoreboard to the child
[Wed Jun 24 09:23:21.198947 2015] etc, etc, etc...
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3117
Location: Hilversum, NL, EU

PostPosted: Wed 24 Jun '15 11:20    Post subject: Reply with quote

I sent you a VC11 Win32 build with the openssl driver, maybe you can test with it.
Back to top
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Wed 24 Jun '15 12:05    Post subject: Reply with quote

Sure Steffen,
I'll test this afternoon!
Thxs again.
Back to top
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Wed 24 Jun '15 15:27    Post subject: Reply with quote

Hi Steffen,

I just tested the version You sent Me...

I did just setup the form authentification but based on file not odbc...

And... IT WORKS with or without Crypto!!!

Non encrypted : http://apaste.info/zpq
Encrypted : http://apaste.info/aMh


If You can do a Win64 Version... It will be Perfect!!!

Millions thanks!
Bertrand.
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3117
Location: Hilversum, NL, EU

PostPosted: Wed 24 Jun '15 16:54    Post subject: Reply with quote

Good news ! Send you VC14 Win64.

Next version of 2.4 then I update all with the openssl driver.
Back to top
BMiot



Joined: 22 Jun 2015
Posts: 13
Location: France

PostPosted: Wed 24 Jun '15 17:36    Post subject: Reply with quote

Tested VC14 Win64 with the files you sent me...

This is Working! Very Happy Very Happy Very Happy
I tested number of releases and Your is the only one working (at least for me) on Win64, with form authentication, users in mysql DB accessed via odbc, and cookie encryption.

Congratulations!

Thank U so Much!!!
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7402
Location: EU, Germany, Next to Hamburg

PostPosted: Fri 26 Jun '15 17:12    Post subject: Reply with quote

I know Steffen asked at the mailing list because of

Quote:
The SessionCryptoDriver directive specifies the name of the crypto driver to be used for encryption. If not specified, the driver defaults to the recommended driver compiled into APR-util.


However can you load / set the driver to OSSL with SessionCryptoDriver ?

Code:

openssl engine=name


I'm curious!
Back to top


Reply to topic   Topic: Apache 2.4 mod_session_crypt crashing server View previous topic :: View next topic
Post new topic   Forum Index -> Apache Page Previous  1, 2