Re: segmentation fault during package build

2014-12-05 Thread Riccardo Mottola

Hi,

Philip Guenther wrote:

then reproduce the problem in the bzip2 port to get a fresh core file
with that binary, then finally run gdb against the_uninstalled_
binary (/usr/src/bin/ln/obj/ln) but with the new core file and see
what the backtrace shows.
before doing that, I did this: make clean=depends (inside libxml, which 
has bzip as a dependency). Make install again.


Now it built bzip2 but ln crashes while installing mapages of tcl. I 
reissue make install now, it crashes again in tcl.


That is, starting from a clean port build may shift the problem, but 
once it is there, I can hit again and again in the same place.
I will try if it survives a reboot, that is if it is file-system 
dependent "only". Once I know it is, I can then check different "ln" 
binaries by leaving it in the same state and not making clean.


Riccardo



Re: segmentation fault during package build

2014-12-05 Thread Riccardo Mottola

Hi Tobias,

what you write is frightening :)

Tobias Ulmer wrote:

On Fri, Dec 05, 2014 at 01:18:18AM +0100, Riccardo Mottola wrote:

Tobias Ulmer wrote:

full dmesg please

Here it is:
OpenBSD 5.6 (GENERIC) #94: Wed Aug 13 13:54:32 GMT 2014
m...@credogne.gentiane.org:/usr/src/sys/arch/sparc/compile/GENERIC
real mem = 166998016 (159MB)
avail mem = 159440896 (152MB)
mainbus0 at root: SUNW,SPARCstation-20
cpu0 at mainbus0: TMS390Z50 v0 or TMS390Z55 @ 50 MHz, on-chip FPU
cpu0: physical 20K instruction (64 b/l), 16K data (32 b/l) cache enabled

This CPU module (Voyager iirc) has issues. It's stable most of the time,
but small programs (like chmod, cat, touch, ...) crash in random places.

Voyager? I don't know, checking:
http://mbus.sunhelp.org/modules/index.htm

I would identify it as SM50, the latter revision, with the large 
heatsink, not the round one.
I suppose you mean by unstable under OpenBSD? It was very stable under 
solaris 2.5.

Would it crash the program always in the same place?

It is the first time I run OpenBSD on this machine, converting it from 
Solaris. It have a dual-HyperSparc module from Ross, but during OpenBSD 
install it apparently failed, becoming unreliable. I hope it is just a 
coincidence of the age and that OpenBSD doesn't "fry" modules :) After a 
while it is up I get back into OBP and at reboot I get a memory failure. 
I suppose the cache controller or the cache went bad.


I still have a SM40 I think, for emergency. I will try that and see, 
after being certain that I can reproduce these error from reboot to 
reboot. Once I get the crash I can type "make install" and reproduce it 
in the same place, but a make clean will have it work and have crash ln 
in another package.



Riccardo



DNS: how to verify glue NS records?

2014-12-05 Thread Alexei Malinin
Hello.

I would like to resolve this problem:
- I have a child DNS zone served by my ISP slave name server;
- the parent zone is served by my ISP master name server;
- the question is - how and with what tools (dig, host, nslookup, or
maybe C or Perl libs) can I verify the NS glue records in the parent
zone of my ISP (zone transfers are denied)?

My child zone is 0-15.66.233.212.in-addr.arpa. I tried "dig -4
+multiline +showsearch +trace 0-15.66.233.212.in-addr.arpa ns" but it
was not possible to make any conclusions about NS glue records from the
dig output.

I found some tools in the Internet (for example
http://www.intodns.com/0-15.66.233.212.in-addr.arpa, see "Missing
nameservers reported by parent") but these are inconvinient, I would
like to use native OS tools (or tools from ports).

Please give me some good advise.


--
Alexei Malinin



Re: 5.6 arrived

2014-12-05 Thread Rodrigo Mosconi
Arrived yesterday to me in Brazil,  Rio...



2014-10-30 22:01 GMT-02:00 Fish Kungfu :

> 5.6 CD's arrived today in Greenville, South Carolina!
>
> On Thu, Oct 30, 2014 at 1:08 PM, Carlin Bingham  wrote:
>
> > On Thu, 30 Oct 2014, at 10:32 AM, Richard Toohey wrote:
> > > On 10/30/14 07:26, Zé Loff wrote:
> > > > Sighted on my mailbox today, in Lisbon, Portugal.
> > > Arrived today in Tauranga, New Zealand.
> > >
> >
> > Arrived today in the other half of New Zealand (Chistchurch).
> >
> >
> > --
> > Carlin



[OT(?)] Offset2lib: bypassing full ASLR on 64bit Linux

2014-12-05 Thread David Coppa
Nice end-of-the-week read:

http://cybersecurity.upv.es/attacks/offset2lib/offset2lib.html

Luckily I use OpenBSD ;)

CIAO,
David
-- 
"If you try a few times and give up, you'll never get there. But if
you keep at it... There's a lot of problems in the world which can
really be solved by applying two or three times the persistence that
other people will."
-- Stewart Nelson



Re: missing packages for SPARC

2014-12-05 Thread Riccardo Mottola

Hi,

Peter Hessler wrote:

On 2014 Dec 04 (Thu) at 07:11:48 + (+), John Long wrote:
:How much time is necessary to build packages during and for a release? How
:much time for snapshots? And how often does this need to be done? I'm trying
:to get an idea how much uptime you would need if somebody who is able to
:take this on doesn't have a suitable box to build on.

32bit sparc packages take 3-5 weeks on a cluster of 5 machines, depending
on how many crashes happen.
by crash, do you mean hardware problems, operating system reliability 
(like the one I am possibly experiencing) or userland problems?


Riccardo

PS: I am in a similar position as John. I cannot run my machines 24/7 
because of noise, but they could contirbute building. ALthough however, 
being set back from dual-Ross 72Mhz with cache, to a single SM50  50Mhz 
no cache... is a hard hit, and if even that is unsuitable...




Re: missing packages for SPARC

2014-12-05 Thread Riccardo Mottola

Hi,

Florenz Kley wrote:

On Dec 3, 2014, at 21:01, patrick keshishian  wrote:

how do you guys deal with disk space with sparc machines?
NFS?

with a hacksaw :-) http://www.well.com/~fl/frankendisk/

single-ended SCSI disks work quite well in the pizza
box design, but they run hotter than the old ones. One disk is not a
problem, for two I wired up a little additional fan later
That's a good idea. My SS20 which has 2 HDDs, CD and floppy, has a fan 
in between, it looks it is wired properly and has an attachment, so it 
looks "original" for certain hotter configurations.


Riccardo



OpenBSD 5.6 problem with Firefox,Chrome when playing flash Videos

2014-12-05 Thread Tasos Tsolakidis 1
Hello
 
i have installed OpenBSD 5.6 but  when i watch with Firefox or Chrome youtube or
vimeo it is so slow and play not fluently. Also i have CPU usage about 90% and
more only when i downloaded it with youtube-dl and watched it with mplayer i
have so 14 till 20%.
 
I have also installed the gstreamer-plugin1 libav
 
so i hope you answer me about that
 
thank you
 
Tasos Tsolakidis
OpenBSD 5.6 (GENERIC) #310: Fri Aug  8 00:14:24 MDT 2014
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 17041059840 (16251MB)
avail mem = 16578691072 (15810MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (65 entries)
bios0: vendor LENOVO version "83ET76WW (1.46 )" date 07/05/2013
bios0: LENOVO 4180MBU
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SLIC SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA SSDT 
SSDT UEFI UEFI UEFI
acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EHC1(S3) EHC2(S3) 
HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-2540M CPU @ 2.60GHz, 2591.99 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 5 (EXP4)
acpiprt5 at acpi0: bus 13 (EXP5)
acpicpu0 at acpi0: C3, C1, PSS
acpipwrres0 at acpi0: PUBS, resource for EHC1, EHC2
acpitz0 at acpi0: critical temperature is 98 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4791" serial 18531 type LION oem "SANYO"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
cpu0: Enhanced SpeedStep 2591 MHz: speeds: 2601, 2600, 2400, 2200, 2000, 1800, 
1600, 1400, 1200, 1000, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 3000" rev 0x09
intagp at vga1 not configured
inteldrm0 at vga1
drm0 at inteldrm0
drm: Memory usable by graphics device = 2048M
inteldrm0: 1600x900
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 6 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
puc0 at pci0 dev 22 function 3 "Intel 6 Series KT" rev 0x04: ports: 1 com
com4 at puc0 port 0 apic 2 int 19: ns16550a, 16 byte fifo
com4: probed fifo depth: 0 bytes
em0 at pci0 dev 25 function 0 "Intel 82579LM" rev 0x04: msi, address 
00:21:cc:49:fc:72
ehci0 at pci0 dev 26 function 0 "Intel 6 Series USB" rev 0x04: apic 2 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "Intel 6 Series HD Audio" rev 0x04: msi
azalia0: codecs: Conexant/0x506e, Conexant/0x2c06, Intel/0x2805, using 
Conexant/0x506e
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 6 Series PCIE" rev 0xb4: msi
pci1 at ppb0 bus 2
ppb1 at pci0 dev 28 function 1 "Intel 6 Series PCIE" rev 0xb4: msi
pci2 at ppb1 bus 3
iwn0 at pci2 dev 0 function 0 "Intel Centrino Advanced-N 6205" rev 0x34: msi, 
MIMO 2T2R, MoW, address a0:88:b4:06:ab:78
ppb2 at pci0 dev 28 function 3 "Intel 6 Series PCIE" rev 0xb4: msi
pci3 at ppb2 bus 5
ppb3 at pci0 dev 28 function 4 "Intel 6 Series PCIE" rev 0xb4: msi
pci4 at ppb3 bus 13
sdhc0 at pci4 dev 0 function 0 "Ricoh 5U823 SD/MMC" rev 0x05: apic 2 int 16
sdmmc0 at sdhc0
ehci1 at pci0 dev 29 function 0 "Intel 6 Series USB" rev 0x04: apic 2 int 23
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1
pcib0 at pci0 dev 31 function 0 "Intel QM67 LPC" rev 0x04
ahci0 at pci0 dev 31 function 2 "Intel 6 Series AHCI" rev 0x04: msi, AHCI 1.3
scsibus1 at ahci0: 32 targets
sd0 at scsibus1 targ 0 lun 0:  SCSI3 0/direct 
fixed naa.5000cca645db645d
sd0: 305245MB, 512 bytes/sector, 625142448 sectors
cd0 at scsibus1 targ 1 lun 0:  ATAPI 5/cdrom 
removable
ichiic0 at pci0 dev 31 function 3 "Intel 6 Series SMBus" rev 0x04: apic 2 int 18
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 8GB DDR3 SDRAM PC3-10600 SO-DIMM
spdmem1 at iic0 addr 0x51: 8GB DDR3 SDRAM PC3-10600 SO-DIMM
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot

Beep low battery

2014-12-05 Thread tixx

Hello,
On my laptop I have a beep every 2 seconds when the battery is low.
How to disable it ? It's not a BIOS setting.
Thanks.

dmesg:

OpenBSD 5.6-current (GENERIC.MP) #650: Fri Dec  5 09:20:49 MST 2014
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 6295150592 (6003MB)
avail mem = 6123724800 (5840MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xeb300 (44 entries)
bios0: vendor American Megatrends Inc. version "4.6.5" date 08/02/2013
bios0: CLEVO CO. W54xEU
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT MCFG SSDT HPET SSDT SSDT SSDT ASF!
acpi0: wakeup devices P0P1(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3) 
USB5(S3) USB6(S3) USB7(S3) PXSX(S5) RP01(S

4) PXSX(S5) RP03(S4) PXSX(S5) RP04(S4) JMC2(S4) JMC3(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Celeron(R) CPU 1000M @ 1.80GHz, 1796.17 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE

2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,PO
PCNT,DEADLINE,XSAVE,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Celeron(R) CPU 1000M @ 1.80GHz, 1795.93 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE

2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,PO
PCNT,DEADLINE,XSAVE,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP03)
acpiprt3 at acpi0: bus 3 (RP04)
acpiprt4 at acpi0: bus 4 (RP05)
acpiprt5 at acpi0: bus -1 (RP06)
acpiec0 at acpi0
acpicpu0 at acpi0: C2, C1, PSS
acpicpu1 at acpi0: C2, C1, PSS
acpitz0 at acpi0: critical temperature is 120 degC
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
acpibtn2 at acpi0: LID0
acpiac0 at acpi0: AC unit offline
acpibat0 at acpi0: BAT0 model "BAT" serial 0001 type LION oem "NOTEBOOK"
acpidock0 at acpi0: DOCK not docked (0)
acpivideo0 at acpi0: GFX0
acpivout0 at acpivideo0: LCD0
cpu0: Enhanced SpeedStep 1796 MHz: speeds: 1800, 1700, 1600, 1500, 1400, 
1300, 1200 MHz

pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 3G Host" rev 0x09
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 2500" rev 0x09
intagp at vga1 not configured
inteldrm0 at vga1
drm0 at inteldrm0
drm: Memory usable by graphics device = 2048M
inteldrm0: 1366x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi
usb0 at xhci0: USB revision 3.0
uhub0 at usb0 "Intel xHCI root hub" rev 3.00/1.00 addr 1
"Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 2 
int 16

usb1 at ehci0: USB revision 2.0
uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: 
msi

azalia0: codecs: VIA/0x8446, Intel/0x2806, using VIA/0x8446
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 2 "Intel 7 Series PCIE" rev 0xc4: msi
pci2 at ppb1 bus 2
athn0 at pci2 dev 0 function 0 "Atheros AR9285" rev 0x01: apic 2 int 18
athn0: AR9285 rev 2 (1T1R), ROM rev 14, address e0:b9:a5:47:f2:0f
ppb2 at pci0 dev 28 function 3 "Intel 7 Series PCIE" rev 0xc4: msi
pci3 at ppb2 bus 3
"Realtek RTL8411 Card Reader" rev 0x01 at pci3 dev 0 function 0 not 
configured
re0 at pci3 dev 0 function 2 "Realtek 8168" rev 0x0a: RTL8411 (0x4880), 
msi, address 00:90:f5:e8:73:c5

rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 5
ppb3 at pci0 dev 28 function 4 "Intel 7 Series PCIE" rev 0xc4: msi
pci4 at ppb3 bus 4
ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 2 
int 23

usb2 at ehci1: USB revision 2.0
uhub2 at usb2 "Intel EHCI root hub" rev 2.00/1.00 addr 1
pcib0 at pci0 dev 31 function 0 "Intel HM77 LPC" rev 0x04
ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, 
AHCI 1.3

scsibus1 at ahci0: 32 targets
sd0 at scsibus1 targ 0 lun 0:  SCSI3 
0/direct fixed naa.50004cf206da51c3

sd0: 152627MB, 512 bytes/sector, 312581808 sectors
cd0 at scsibus1 targ 2 lun 0:  ATAPI 
5/cdrom removable
sd1 at scsibus1 targ 4 lun 0:  SCSI3 
0/d

Re: segmentation fault during package build

2014-12-05 Thread Tobias Ulmer
On Fri, Dec 05, 2014 at 10:48:36AM +0100, Riccardo Mottola wrote:
> Hi Tobias,
> 
> what you write is frightening :)
> 
> Tobias Ulmer wrote:
> >On Fri, Dec 05, 2014 at 01:18:18AM +0100, Riccardo Mottola wrote:
> >>Tobias Ulmer wrote:
> >>>full dmesg please
> >>Here it is:
> >>OpenBSD 5.6 (GENERIC) #94: Wed Aug 13 13:54:32 GMT 2014
> >>m...@credogne.gentiane.org:/usr/src/sys/arch/sparc/compile/GENERIC
> >>real mem = 166998016 (159MB)
> >>avail mem = 159440896 (152MB)
> >>mainbus0 at root: SUNW,SPARCstation-20
> >>cpu0 at mainbus0: TMS390Z50 v0 or TMS390Z55 @ 50 MHz, on-chip FPU
> >>cpu0: physical 20K instruction (64 b/l), 16K data (32 b/l) cache enabled
> >This CPU module (Voyager iirc) has issues. It's stable most of the time,
> >but small programs (like chmod, cat, touch, ...) crash in random places.
> Voyager? I don't know, checking:
> http://mbus.sunhelp.org/modules/index.htm
> 
> I would identify it as SM50, the latter revision, with the large heatsink,
> not the round one.

I just had a look, mine are 501-2708

> I suppose you mean by unstable under OpenBSD? It was very stable under
> solaris 2.5.

Yes, under OpenBSD. I don't know about other OS.

> Would it crash the program always in the same place?

No.

> 
> It is the first time I run OpenBSD on this machine, converting it from
> Solaris. It have a dual-HyperSparc module from Ross, but during OpenBSD
> install it apparently failed, becoming unreliable. I hope it is just a
> coincidence of the age and that OpenBSD doesn't "fry" modules :) After a
> while it is up I get back into OBP and at reboot I get a memory failure. I
> suppose the cache controller or the cache went bad.

Cooling issue? My SS10/SS20 work fine with a HM150S-512

> 
> I still have a SM40 I think, for emergency. I will try that and see, after
> being certain that I can reproduce these error from reboot to reboot. Once I
> get the crash I can type "make install" and reproduce it in the same place,
> but a make clean will have it work and have crash ln in another package.
> 
> 
> Riccardo



Re: Apache2 - intermittent ssl_error_rx_record_too_long

2014-12-05 Thread John Merriam

On 12/4/2014 8:46 PM, John Merriam wrote:

Hello.  I am experiencing a strange problem with Apache 2.2.27p4 on
OpenBSD 5.6-stable amd64.

I am _intermittently_ getting this error:

SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

in Firefox 31.3.0esr (both Linux and Windows clients) when accessing my
server via HTTPS.  I am not seeing errors pop up in other browsers but I
am seeing strange things in IE11 and Chromium where things seem to not
always load over HTTPS.  The Qualsys SSL Server Test website also
reports errors accessing my server sometimes when I have run tests
against it using their tool.

What is very strange is that it is intermittent.  Things seem to work
then click a link or reload a page and the error pops up.
*snip*


I seem to have stopped the odd Apache behavior.  Still not sure why it 
was a problem though.


I was able to observe that Apache 2.2 was occasionally deciding it 
didn't want the use the appropriate protocol on the proper port.  I was 
able to get it to occasionally speak HTTP on port 443.  I was also able 
to occasionally get it to speak HTTPS on port 80.  I found that 
extremely strange.


At the start of this adventure I had the following pertinent 
configuration set:


/etc/apache2/httpd2.conf

Listen 80

  ...


  ...

Include /etc/apache2/extra/httpd-ssl.conf

/etc/apache2/extra/httpd-ssl.conf
-
Listen 443

  ...


  ...



At the end, it looked like the following:

/etc/apache2/httpd2.conf

Listen 1.2.3.4:80 http
Listen 1.2.3.5:80 http

  ...


  ...

Include /etc/apache2/extra/httpd-ssl.conf

/etc/apache2/extra/httpd-ssl.conf
-
Listen 1.2.3.4:443 https
Listen 1.2.3.5:443 https

  ...


  ...



I had to specify multiple Listen directives for each IP.  I would guess 
that specifying the protocol in the Listen directives might not be 
necessary to fix this, but at this point, I'll leave it...


The Apache docs don't seem to indicate that using Listen directives like 
that should have been necessary.  Very strange to me.  If I have the 
time, I'll see if I can figure out exactly what the issue was here.  I 
think I might have an idea of what was going on and it may not really be 
a bug in Apache but if it's not then the behavior should be documented 
by them somewhere.


Anyway, at this point, I don't think this has much to do with OpenBSD 
specifically.  So, sorry for the noise but I figured I should send the 
resolution that I found in case someone else runs in to this.


--

John Merriam