Re: TS_VCONN_PRE_ACCEPT_HOOK and TS_SSL_SNI_HOOK hooks

2016-07-18 Thread Susan Hinrichs
Both UE and a code problem! Once I fixed my configuration problem, there were two remaining checks that insisted on specifying a cert on the line in ssl_multicert before inserting the entry in the lookup tree. Once I removed those checks a line like dest_ip=107.23.60.186 action=tunnel Work

Re: TS_VCONN_PRE_ACCEPT_HOOK and TS_SSL_SNI_HOOK hooks

2016-07-18 Thread Susan Hinrichs
I would think that you could do this without a dummy certificate. I just set this up on my transparent test VM, and it looks like we aren't tunneling at all. Will track this down. Either a bug in the code or UE on my part. On 7/18/2016 6:26 AM, Chao Xu wrote: sorry, I did not try the featu

Re: SegFaulting in TSVConnSSLConnectionGet

2016-07-18 Thread Alan Carroll
The most likely problem here is that the NetVC (what you get from entry->waitingVConns.pop_back()) has been freed. That's just a pointer and if the actual NetVC has internally been put on the free list, dynamic_cast<> will crash. I think the NULL pointer is a red herring, an artifact of the bad

SegFaulting in TSVConnSSLConnectionGet

2016-07-18 Thread Steven R. Feltner
I was finally able to turn on my SSL lazy loader plugin (temporarily) to production traffic. After several minutes (random between 8 and 30 minutes), I get a seg fault at the dynamic_cast of the vc inside TSVConnSSLConnectionGet: #0 0x76e443b9 in __dynamic_cast () from /usr/lib64/libs

Re: TS_VCONN_PRE_ACCEPT_HOOK and TS_SSL_SNI_HOOK hooks

2016-07-18 Thread Chao Xu
sorry, I did not try the feature, but I think Susan maybe known it in detail. 2016-07-18 12:44 GMT+08:00 James Peach : > > > On Jul 15, 2016, at 4:20 PM, Chao Xu wrote: > > > > Do you try set action=tunnel in ssl_multicert.config ? > > > > # action=[tunnel] > > # If the tunnel matches this lin