Bug 206333 – www-servers/lighttpd-1.4.18 randomly breaks ssl connections

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Grzegorz {NineX} Krzystek 2008-01-17 13:36:17 UTC]

lighttpd-1.4.18 randomly close ssl connections and generate this error:

2008-01-17 14:26:27: (network_openssl.c.154) SSL: 1 -1 error:1409F07F:SSL routines:SSL3_WRITE_PENDING:bad write retry
2008-01-17 14:26:27: (connections.c.603) connection closed: write failed on fd 15





openssl version: dev-libs/openssl-0.9.8g

server lighttpd # emerge --info
Portage 2.1.3.19 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.23-gentoo-r3 i686)
=================================================================
System uname: 2.6.23-gentoo-r3 i686 Pentium II (Deschutes)
Timestamp of tree: Thu, 17 Jan 2008 13:00:01 +0000
app-shells/bash:     3.2_p17-r1
dev-lang/python:     2.4.4-r6
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.10-r5
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.5, 1.7.9-r1, 1.10
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=i686 -pipe -O2 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/init.d /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-march=i686 -pipe -O2 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.prz.rzeszow.pl http://gentoo.po.opole.pl http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo http://dev.gentoo.org"
LINGUAS="pl en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="7zip bash-completion bzip2 calendar caps cgi clearpasswd cli cracklib crypt ctype curl exif exiscan-acl extensions fam fastcgi fbcon ftp gd gmp gnutls gpg2-experimental gpm gsl hash iconv icq idea idn imap ipv6 jabber logrotate masquerade mbox mbx mhash mmx mysql ncurses nls no-old-linux nptl nptlonly pam pcntl pcre perl php posix python readline sasl session simplexml slang spell spl ssl symlink sysvipc tcl truetype udev unicode urandom usb userlocales x86 xinetd xml xmlreader xmlrpc xmlwriter xsl yaz zero-penalty-hit zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1         emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m       maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="pl en" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i740 i810 imstt       mach64 mga neomagic nsc nv r128 radeon rendition s3 s3virge savage      siliconmotion sis sisusb tdfx tga trident tseng v4l vesa vga via vmware       voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY


Reproducible: Always

[Comment 1 Thilo Bangert (RETIRED) (RETIRED) 2008-01-17 13:53:07 UTC]

upstream appears to track this at http://trac.lighttpd.net/trac/ticket/285

[Comment 2 Carlo Marcelo Arenas Belon 2008-03-04 00:10:28 UTC]

a patch has been committed upstream in :

  http://trac.lighttpd.net/trac/changeset/2084

with a workaround for old Opera browsers breaking SSL connections

[Comment 3 Maxime Pelletier 2008-03-25 20:07:31 UTC]

This patch is in lighttpd 1.4.19, so it will be fixed when the version is bumped in portage.

[Comment 4 Thilo Bangert (RETIRED) (RETIRED) 2008-03-25 21:36:30 UTC]

1.4.19 is now in the tree. please reopen if problem persists.
thanks for the report.