On 09/08/01 01:04 PM, Lutz Jaenicke sat at the `puter and typed:
> On Fri, Sep 07, 2001 at 05:39:52PM -0400, Louis LeBlanc wrote:
> > Now I have another problem. In trying to call
> > SSL_CTX_flush_sessions(ssl_ctx, time(0));
> >
> > I am being blessed with a core dump.
>
> [output deleted]
>
> > I could be wrong, but I think that negative value on the timeout is a
> > bad thing. Anyone with some idea how that happened? It'd be a pain
> > in the neck to have to set the timeout on each individual SSL struct,
> > when I am using only one SSL_CTX configuration to create them all, so
> > what is the process when a connection is created from a context? Am I
> > misunderstanding something here, or does this look like a problem?
>
> If I should give a guess (and I am asked for one here :-):
> An SSL_SESSION has been freed (reference count became zero and it was actually
> deleted) but the list of cached sessions inside SSL_CTX was not updated
> successfully. I don't know whether this is due to your code. We have
> received a patch to improve (fix?) session list handling several days
> ago but no time to look into it, yet.
>
Hmm. So does anyone know if there are any changes in the session
handling between 0.9.6 and the latest release? I'll see if there is
any mention in the changelogs since 0.9.6.
I am not willing to swear my code isn't doing anything wrong here, but
it seems the library should still do something other than dump core.
But I'm sure the OpenSSL developers don't need me to tell them this.
IIRC, 0.9.6b is still beta; will this patch get into that release if
it turns up clean? Is this something I should be using to push an
upgrade to the latest release?
My FreeBSD 4.3 system has 0.9.6a in the base system. I feel pretty
comfortable with that as a recommendation, but I don't know about the
CM folks here.
Thanks for the info.
Lou
--
Louis LeBlanc [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://acadia.ne.mediaone.net ԿԬ
The nation that controls magnetism controls the universe.
-- Chester Gould/Dick Tracy
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
