SSL bad decompression

Matthew L. Creech mlcreech at gmail.com
Thu Aug 14 11:59:38 EDT 2008


On Thu, Aug 14, 2008 at 11:08 AM, Joe Orton <joe at manyfish.co.uk> wrote:
>
> OK, this is useful data - can you give details of your internal servers?
> Linux distro, OpenSSL version, httpd version?
>

Info from both before & after the server was upgraded.  Note that the
same problem happened with both, and the "upgrade" was actually a full
re-install on new hardware, I just copied the Apache and Subversion
configurations from the old server (including the certificates).  So
it's unlikely there are lingering one-off issues with the installation
or anything like that, it has to be either a bug in one of the
packages or a bad configuration on my part.

Distro: Gentoo (i686)
Kernels: 2.6.24, previously 2.6.11, both with grsec patches
Openssl: 0.9.8h-r1, previously 0.9.8c
APR & APR-util: 1.3.2, previously 0.9.12
Apache: 2.2.9, previously 2.0.59
Neon: 0.28.2, previously 0.26.1 (don't know if that matters on the server)

I'll follow-up when I find anything else out.  Thanks

-- 
Matthew L. Creech



More information about the neon mailing list