[Bug 1626883] Re: libssl 1.0.2g-1ubuntu4.4 and 1.0.1f-1ubuntu2.20 cause PHP SSL cert validation to segfault

2016-09-25 Thread Olli Salli
Thank you. I can verify libssl1.0.0 1.0.2g-1ubuntu4.5 no longer exhibits the crash: jenkins@ubuntutemplate:/var/lib/jenkins/workspace/imt-erp-e2e-flaky/webshop/vagrant/wordpress$ apt-cache policy libssl1.0.0 libssl1.0.0: Installed: 1.0.2g-1ubuntu4.5 Candidate: 1.0.2g-1ubuntu4.5 Version tabl

[Bug 1626883] Re: libssl 1.0.2g-1ubuntu4.4 and 1.0.1f-1ubuntu2.20 cause PHP SSL cert validation to segfault

2016-09-23 Thread Olli Salli
** Summary changed: - libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault + libssl 1.0.2g-1ubuntu4.4 and 1.0.1f-1ubuntu2.20 cause PHP SSL cert validation to segfault -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. ht

[Bug 1626883] Re: libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault

2016-09-23 Thread Olli Salli
@mikini, I actually had a similar situation with apt-get wanting to remove npm. That's due to npm depending on node-gyp, which depends on nodejs-dev, which depends on libssl-dev. You need to install an old version of that package as well, you can't have a new libssl-dev package and an old libssl pa

[Bug 1626883] Re: libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault

2016-09-23 Thread Olli Salli
The stacktrace would seem to indicate that libssl indeed returned a null string here, from i2s_ASN1_INTEGER(NULL, X509_get_serialNumber(cert)) Relevant php7.0 code here: https://github.com/php/php- src/blob/f13fd9e72a13e80512f6c8b2302e42d4f252c479/ext/openssl/openssl.c#L2295 -- You received thi

[Bug 1626886] Re: libssl 1.0.2g-1ubuntu4.4 may cause Apache2 with libapache2-mod-php7.0 to crash

2016-09-23 Thread Olli Salli
Yeah judging from the stack trace, this is indeed the same thing as https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1626883. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1626886 Title: libss

[Bug 1626886] [NEW] libssl 1.0.2g-1ubuntu4.4 may cause Apache2 with libapache2-mod-php7.0 to crash

2016-09-23 Thread Olli Salli
Public bug reported: I started getting apache2 crashes at the same time as I started getting PHP 7.0 CLI crashes, after my openssl packages were updated to the latest xenial-security version by unattended-upgrades. I traced the PHP CLI crashes to server cert validation starting to crash after upd

[Bug 1626883] Re: libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault

2016-09-23 Thread Olli Salli
The primary issue is some patch in the latest openssl, which breaks current php7.0. Not any change in the PHP package. ** Package changed: php7.0 (Ubuntu) => openssl (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bug

[Bug 1626883] [NEW] libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault

2016-09-23 Thread Olli Salli
Public bug reported: Last night unattended-upgrades upgraded the openssl packages (libssl1.0.0, libssl-dev, openssl) from version 1.0.2g-1ubuntu4.1 to version 1.0.2g-1ubuntu4.4 on a CI build server. Then everything that used PHP to connect to a HTTPS site started crashing when verifying the server