Bugzilla Bug 206333

lighttpd-1.4.18 randomly close ssl connections and generate this error:

2008-01-17 14:26:27: (network_openssl.c.154) SSL: 1 -1 error:1409F07F:SSL
routines:SSL3_WRITE_PENDING:bad write retry
2008-01-17 14:26:27: (connections.c.603) connection closed: write failed on fd
15





openssl version: dev-libs/openssl-0.9.8g

server lighttpd # emerge --info
Portage 2.1.3.19 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.6.1-r0,
2.6.23-gentoo-r3 i686)
=================================================================
System uname: 2.6.23-gentoo-r3 i686 Pentium II (Deschutes)
Timestamp of tree: Thu, 17 Jan 2008 13:00:01 +0000
app-shells/bash:     3.2_p17-r1
dev-lang/python:     2.4.4-r6
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.10-r5
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.5, 1.7.9-r1, 1.10
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=i686 -pipe -O2 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/init.d
/etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/
/etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo
/etc/udev/rules.d"
CXXFLAGS="-march=i686 -pipe -O2 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms strict
unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.prz.rzeszow.pl http://gentoo.po.opole.pl
http://distfiles.gentoo.org
http://www.ibiblio.org/pub/Linux/distributions/gentoo http://dev.gentoo.org"
LINGUAS="pl en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages
--filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="7zip bash-completion bzip2 calendar caps cgi clearpasswd cli cracklib
crypt ctype curl exif exiscan-acl extensions fam fastcgi fbcon ftp gd gmp
gnutls gpg2-experimental gpm gsl hash iconv icq idea idn imap ipv6 jabber
logrotate masquerade mbox mbx mhash mmx mysql ncurses nls no-old-linux nptl
nptlonly pam pcntl pcre perl php posix python readline sasl session simplexml
slang spell spl ssl symlink sysvipc tcl truetype udev unicode urandom usb
userlocales x86 xinetd xml xmlreader xmlrpc xmlwriter xsl yaz zero-penalty-hit
zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci
emu10k1         emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0
intel8x0m       maestro3 trident usb-audio via82xx via82xx-modem ymfpci"
ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file
hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route
share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias
authn_anon authn_dbm authn_default authn_file authz_dbm authz_default
authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs
dav_lock deflate dir disk_cache env expires ext_filter file_cache filter
headers include info log_config logio mem_cache mime mime_magic negotiation
rewrite setenvif speling status unique_id userdir usertrack vhost_alias"
ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux"
LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses
text" LINGUAS="pl en" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix
dummy fbdev glint i128 i740 i810 imstt       mach64 mga neomagic nsc nv r128
radeon rendition s3 s3virge savage      siliconmotion sis sisusb tdfx tga
trident tseng v4l vesa vga via vmware       voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL,
LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS,
PORTDIR_OVERLAY


Reproducible: Always

upstream appears to track this at http://trac.lighttpd.net/trac/ticket/285

a patch has been committed upstream in :

  http://trac.lighttpd.net/trac/changeset/2084

with a workaround for old Opera browsers breaking SSL connections

This patch is in lighttpd 1.4.19, so it will be fixed when the version is
bumped in portage.

1.4.19 is now in the tree. please reopen if problem persists.
thanks for the report.