Apache crashing by libcrypto.so.4

[Ace]

Hello all,

Yesterday I had to fix the server of a customer; his apache wouldn't start.
Apache segfaulted. Running it through gdb pointed out that libcrypto.so.4 was the cause. The customer messed with apache and used the custombuild script to run apache2.2/php5 (which took me a long time to figure out, as he apparently reinstalled apache2.0 with the customapache script hehe )
I also reinstalled apache-2.0 and apache-1.3, they both segfaulted too..

Anyways, I tried reinstalling the openssl rpm, with --force, and it DID replace the /lib/libcrypto.so.0.9.7a (the date AND the size was different); no use. I had to recompile apache2.2 without SSL and remove all the ssl references in the conf to at least have his webserver up again, but this is no solution. Please see the first reply for full gdb output.

Any help greatly appreciated!
-Frederic

 

[Ace]

GDB Output

(gdb) run
Starting program: /usr/sbin/httpd
Failed to read a valid object file image from memory.
[Thread debugging using libthread_db enabled]
[New Thread -1213637824 (LWP 4646)]
[Sat Jul 14 00:33:02 2007] [warn] module php5_module is already loaded, skipping
[Sat Jul 14 00:33:02 2007] [warn] NameVirtualHost *censored*:80 has no VirtualHosts
[Sat Jul 14 00:33:02 2007] [warn] NameVirtualHost *censored*:443 has no VirtualHosts

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1213637824 (LWP 4646)]
0x000048de in ?? ()
(gdb) where
#0 0x000048de in ?? ()
#1 0x0000000a in ?? ()
#2 0x00000013 in ?? ()
#3 0xb7ee8362 in CAST_S_table0 () from /lib/libcrypto.so.4
#4 0x00000227 in ?? ()
#5 0xb7e28400 in ?? () from /lib/libcrypto.so.4
#6 0xbfeb36c0 in ?? ()
#7 0xb7e907a2 in RAND_SSLeay () from /lib/libcrypto.so.4
#8 0x00000002 in ?? ()
#9 0x080fc4e0 in ?? ()
#10 0xbfeb3698 in ?? ()
#11 0xb7e90f98 in RAND_status () from /lib/libcrypto.so.4
Previous frame inner to this frame (corrupt stack?)
(gdb) quit

 

[Ace]

Seems to be a very strange issue, specific to this (rpm-?)openssl version (namely openssl-0.9.7a-43.16 CentOS 4.5 RPM).
I got it fixed by compiling apache against a prefixed installation of latest openssl; works like a charm now!