Platform tested: Fedora 8 i386 - latest updates Testing with fedora-ds-admin 1.1.6 (pre-release) When fedora-ds-admin starts up, I get the following errors in /var/log/dirsrv/admin-serv/error: [Wed Jul 09 13:49:26 2008] [notice] child pid 7621 exit signal Segmentation fault (11) [Wed Jul 09 13:49:27 2008] [error] SSL_InheritMPServerSIDCache failed [Wed Jul 09 13:49:27 2008] [error] SSL Library Error: -8191 Library Failure The code in nss_init_Module() does the following: ap_mpm_query(AP_MPMQ_MAX_THREADS, &threaded); if (!threaded) SSL_ConfigMPServerSIDCache(mc->session_cache_size, (PRUint32) mc->session_cache_timeout, (PRUint32) mc->ssl3_session_cache_timeout, NULL); else SSL_ConfigServerSessionIDCache(mc->session_cache_size, (PRUint32) mc->session_cache_timeout, (PRUint32) mc->ssl3_session_cache_timeout, NULL); fedora-ds-admin uses multi-threaded mode. But because of the way Apache works, it always forks child processes, which calls into this function: void nss_init_Child(apr_pool_t *p, server_rec *base_server) ... if (SSL_InheritMPServerSIDCache(NULL) != SECSuccess) { The problem is that you cannot call SSL_InheritMPServerSIDCache() unless you have first called SSL_ConfigMPServerSIDCache(). I suppose the best thing to do would be to init the SSL caches for both mp and mt modes. Barring that, it's probably safe to just skip SSL_InheritMPServerSIDCache in nss_init_Child if mt mode.
Created attachment 311426 [details] patch I'm also having a core dump problem. I think the problem is that none of the SSL init stuff in nss_init_Child() should be done if ssl is not enabled, similar to the way nss_init_Module works. Attached is a patch.
mod_nss-1.0.7-8.fc8 has been submitted as an update for Fedora 8
mod_nss-1.0.7-9.fc9 has been submitted as an update for Fedora 9
mod_nss-1.0.7-8.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
mod_nss-1.0.7-9.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.