To close out this issue in the hopes that this will be of use to someone in the future, Dr. Henson greatly helped in tracking the problem down to a PHP extension that was calling EVP_cleanup().

"When you have a shared library using OpenSSL and multiple applications things like algorithm tables etc are common to all of them. So if one application messes up the tables then it will affect all applications subsequently. There has been a comment about it in PR#1743"

"You'll only notice issues with Apache if you do something that looks up message digests from the algorithm table, such as verifying certificate signatures, which will only happen if you enable client authentication and not many people do."

Removing the PHP code that triggered EVP_cleanup() resolved our issue.

Thank you Steve!

Jon
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to