Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 899392 (JBEWS-70)

Summary: RHEL 4 OCSP support in EWS
Product: [JBoss] JBoss Enterprise Web Server 1 Reporter: Jan Lanik <jlanik>
Component: unspecifiedAssignee: Permaine Cheung <pcheung>
Status: CLOSED WONTFIX QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: EWS 1.0.2CC: jlanik, pcheung, rebecca.jboss
Target Milestone: ---   
Target Release: TBD EWS   
Hardware: Unspecified   
OS: Unspecified   
URL: http://jira.jboss.org/jira/browse/JBEWS-70
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
RHEL 4, x86_64 + i386, zip distribution
Last Closed: 2011-06-20 11:29:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
httpd-2.2.14-sslocsp.patch none

Description Jan Lanik 2011-04-11 08:39:32 UTC 
project_key: JBEWS

I followed the test setup as described here https://tcms.engineering.redhat.com/case/81144/?from_plan=592

As a response to 
#wget --output-document=/dev/null --no-check-certificat --certificate=client_cert/america.sfo.corp.google.com.pem --ca-certificate=client_cert/ca.pem  https://localhost/ocsp.txt --private-key=certs/europa.sfo.corp.google.com.pem

I got:--04:23:10--  https://localhost/ocsp.txt
           => `/dev/null'
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:443... connected.
Unable to establish SSL connection.

the httpd error_log contains this record:
[Mon Apr 11 04:22:10 2011] [notice] child pid 8567 exit signal Segmentation fault (11)
Comment 1 Permaine Cheung 2011-05-04 16:06:06 UTC 
Attaching patch from RHEL httpd maintainer to work with the older OpenSSL used on 
RHEL-4. It didn't make it to CR2.
Comment 2 Permaine Cheung 2011-05-04 16:06:06 UTC 
Attachment: Added: httpd-2.2.14-sslocsp.patch
Comment 3 Permaine Cheung 2011-05-10 15:08:15 UTC 
We'll be including this fix in CR3, updating Fix version accordingly.
Comment 4 Permaine Cheung 2011-05-11 15:50:12 UTC 
Fixed in httpd22-2.2.17-12.ep5.el4, will be in CR3, marking as resolved.
Comment 5 Jan Lanik 2011-05-19 09:22:13 UTC 
Now I have this message:
(nothing explanatory in logs)

Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:443... connected.
OpenSSL: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
Unable to establish SSL connection.
Comment 6 Permaine Cheung 2011-05-24 14:06:06 UTC 
The patch was sent to me from the RHEL maintainer of httpd and he said that he has run tests locally in a VM and it works fine.
Comment 7 Jan Lanik 2011-05-25 07:16:38 UTC 
Which tests did he run? Can he send us a detailed procedure he used to test it?
Comment 8 Permaine Cheung 2011-05-25 18:30:28 UTC 
Unfortunately, he's on PTO this week, I've sent you his contact in a separate email.
Comment 9 Jan Lanik 2011-05-31 06:48:35 UTC 
I didn't get any separate mail.
Comment 10 Permaine Cheung 2011-06-02 13:03:34 UTC 
Hi Jan, have you got a chance to get in touch with Joe?
Comment 11 Jan Lanik 2011-06-03 09:01:40 UTC 
I sent him an email. You've said that he has PTO this week, so I hope he'll be able to provide me with that information next week when we are about to test CR4.
Comment 12 Permaine Cheung 2011-06-03 13:01:00 UTC 
Thanks Jan, I'll leave this one for verification in CR4.
Comment 13 Rajesh Rajasekaran 2011-06-17 18:36:57 UTC 
This issue hasn't been resolved in 1.0.2 release. Moving to TBD and assigning to Rebecca for documenting as known issue.
Comment 14 Rebecca Newton 2011-06-20 04:06:53 UTC 
Hi Permaine, Can you, or can you link me to, someone please let me know what is happening with this issue? I need to know what is causing it, what effect that has, and if there is a workaround. Thank you.
Comment 15 Rebecca Newton 2011-06-20 04:07:29 UTC 
Release Notes Docs Status: Added: Needs More Info
Comment 16 Jan Lanik 2011-06-20 06:54:44 UTC 
Rebecca: I'll give you as detailed desription as I can, but I need to consult it with someone who's not here right now. I hope I'll be able to give you some more detailed report today. So please have patience. Thank you. Jan
Comment 17 Rebecca Newton 2011-06-20 07:02:17 UTC 
Hi Jan, thanks for you reply. Will only need this by EWS release, so still a bit of time yet. :)
Comment 18 Jan Lanik 2011-06-20 11:28:48 UTC 
Hi, we found out that this problem was caused by the wrong ews installation setup. I created a new jira (JBPAPP-6747) in order to fix the instalation setup documentation to avoid this. Hence I'm closing this jira.
Comment 19 Jan Lanik 2011-06-20 11:29:30 UTC 
Not a Bug.
Comment 20 Jiri Skrabal 2012-11-13 15:56:40 UTC 
Release Notes Docs Status: Removed: Needs More Info 
Docs QE Status: Removed: NEW