The message 'unusably short session_id provided (0 bytes)' is logged repeatedly when HTTPS sessions are in progress. Reproducible: Always Steps to Reproduce: 1. upgrade to dev-libs/openssl-0.9.8f 2. set up an apache vhost that accepts https:// connections 3. open connections Actual Results: [Wed Nov 07 16:14:08 2007] [error] unusably short session_id provided (0 bytes) [Wed Nov 07 16:14:23 2007] [error] unusably short session_id provided (0 bytes) [Wed Nov 07 16:14:51 2007] [error] unusably short session_id provided (0 bytes) Expected Results: Content being served over HTTPS without frequent error messages, as it was before.
Open bugs for this package, both by the same reporter: bug #196554 and bug #196555, suspect CFLAGS at fault in both cases, request to sidestep.
Requesting stable keywords on this package for production servers running Apache and serving content over HTTPS (like mine are doing; AMD64).
Bad. I believe stabilizing openssl-0.9.8g should make it into release, assuming it's ready to go. base-system?
Base-system says: do it.
Sparc done (a couple weeks early) to help with release cycle. On sparc it passes all tests as expected, and I can't duplicate either bug #196554 or bug #196555 (no problems on sparc or on amd64). But then, I use /var/tmp/portage, not /tmp/portage, although I don't see why that should make a bit of difference.
x86 done
alpha/ia64 stable
ppc64 stable
Stable for HPPA.
As always bsd is NOT a stable keyword
amd64 done.
mips stable.
ppc stable
