On Sat, Nov 23, 2013 at 03:53:32PM +0300, Ayman Al Shorman wrote:

> ssl_ciph.c(386): OpenSSL internal error, assertion failed:
> ssl_mac_secret_size[SSL_MD_MD5_IDX] >= 0.
> 
> I have *openssl-1.0.0-27.el6_4.2.x86_64* and
> *openssl-devel-1.0.0-27.el6_4.2.x86_64* installed on centos 6.3.
> 
> There is no special case to reproduce the error and the problem is the
> application server is crashing from time to time.

This suggests memory corruption, or failure to properly implement
locking in a multi-threaded application.

        ssl_digest_methods[SSL_MD_MD5_IDX]=
                EVP_get_digestbyname(SN_md5);
        ssl_mac_secret_size[SSL_MD_MD5_IDX]=
                EVP_MD_size(ssl_digest_methods[SSL_MD_MD5_IDX]);
        OPENSSL_assert(ssl_mac_secret_size[SSL_MD_MD5_IDX] >= 0);

The code in above is in ssl_load_ciphers() which is called late
in SSL_library_init().  The latter should be called just once by
your application, before it first uses SSL.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to