SSL bad decompression
Matthew L. Creech
mlcreech at gmail.com
Thu Aug 14 11:59:38 EDT 2008
On Thu, Aug 14, 2008 at 11:08 AM, Joe Orton <joe at manyfish.co.uk> wrote:
>
> OK, this is useful data - can you give details of your internal servers?
> Linux distro, OpenSSL version, httpd version?
>
Info from both before & after the server was upgraded. Note that the
same problem happened with both, and the "upgrade" was actually a full
re-install on new hardware, I just copied the Apache and Subversion
configurations from the old server (including the certificates). So
it's unlikely there are lingering one-off issues with the installation
or anything like that, it has to be either a bug in one of the
packages or a bad configuration on my part.
Distro: Gentoo (i686)
Kernels: 2.6.24, previously 2.6.11, both with grsec patches
Openssl: 0.9.8h-r1, previously 0.9.8c
APR & APR-util: 1.3.2, previously 0.9.12
Apache: 2.2.9, previously 2.0.59
Neon: 0.28.2, previously 0.26.1 (don't know if that matters on the server)
I'll follow-up when I find anything else out. Thanks
--
Matthew L. Creech
More information about the neon
mailing list