389-ds-base

#47730 admin server crashes with SSL enabled
Closed: wontfix Opened by rmeggins.

Closed: wontfix
Reopen Issue

I installed 389 with no issues. I installed ssl using the script and at some point I did a yum update which took me to centos 6.5 from 6.4. My dirsrv-admin service would not even start until i modified the script to create the .db files. Regardless, I keep getting the same error below.

[Thu Mar 06 10:44:45 2014] [notice] child pid 476 exit signal Segmentation fault (11), possible coredump in /var/log/dirsrv/admin-serv
[Thu Mar 06 10:44:46 2014] [error] NSS_Initialize failed. Certificate database: /etc/dirsrv/admin-serv.
[Thu Mar 06 10:44:46 2014] [error] SSL Library Error: -8038 SEC_ERROR_NOT_INITIALIZED

Customer has modified the setupssl2.sh script to create 2048 bit certs.

389 packages versions
abGKKEYn.txt

stack trace
U08uGYnk.txt

customer says this works fine in rhel 6.4. So something in the upgrade to rhel 6.5 broke it - 389-admin or openldap or nss version upgrade caused the problem.

I have a suspicion that the crash is related to the nss package. I would try downgrading the nss package to the version that is in RHEL 6.4 to see if it stops crashing.

Customer reports that downgrading nss to 3.14.latest makes the crash go away.

We will need to see if we can reproduce with nss 3.15.latest, then get the NSS team involved as needed.

This is a bug in NSS. I will ask the NSS developers when they plan to have new Fedora builds available.

A NSS fix for this was released in RHEL 6.x:

http://rhn.redhat.com/errata/RHBA-2014-0398.html

Metadata Update from @nkinder:
- Issue set to the milestone: N/A

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1063

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)
Metadata
None
None
None
None
Normal
Community
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.