View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001439 | unreal | ircd | public | 2003-12-18 16:43 | 2004-02-01 02:45 |
| Reporter | Mouse | Assigned To | |||
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Product Version | 3.2-beta19 | ||||
| Summary | 0001439: SSLS errors and alot of SSL clients would cause high CPU usage | ||||
| Description | my friend been loading clones with SSL support on my other ircd and my ircd been at 99% all of the time ;/ I had to close down SSL ports to solve the CPU problem. also I getting alot of errors if clones being loaded. -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxx22.2342]: SSL_write(): Internal OpenSSL error or protocol error - -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxx.28.3234]: SSL_write(): Internal OpenSSL error or protocol error - -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxx5.2215]: SSL_write(): Internal OpenSSL error or protocol error - -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxx0.3507]: SSL_write(): Internal OpenSSL error or protocol error - -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxxxx.4762]: SSL_write(): Internal OpenSSL error or protocol error - -Night.FL.US.Global-Dimension.org- Exiting ssl client [@xxxxxxx60.2214]: SSL_write(): Internal OpenSSL error or protocol error | ||||
| Steps To Reproduce | not sure | ||||
| 3rd party modules | |||||
|
|
Probably it's just a compatibility problem with SSL libraries between clients and the server, which is mostly caused by too differing versions of OpenSSL. |
|
|
AngryWolf: I don't think so, but I don't exclude anything... Mouse: SSL can use quite a lot CPU usage, that's correct... it's encryption after all which is quite CPU intensive. I'm not too comfortable with SSL that I know how many users on what system would use 99% cpu usage... so I don't know what's "normal". On a sidenote the 'Exiting ssl client' error messages you see are sent to the JUNK snomask (+s +j), which is exactly that.. junk.. it's not ment to be a mode that everyone has set but more like if you have problems and want to find out what... You get other funny junk error messages if you telnet to an ssl port and say "blah!" too, so... A few questions: - how many clones? (how many were able to connect etc..) - what are the system specs? (cpu and memory) |
|
|
actually, with the newest Unreal3.2-beta19 many people started to be unable to connect to the IRC Server using the SSL ports. The SSL configuration has not been changed and the certificates are exactly the same. EDIT: the same "internal OpenSSL protocol error" was returned. The SSL support worked for these users on other servers. edited on: 12-18-03 23:41 |
|
|
Nothing was changed in the last version indeed. I suspect an openssl upgrade since previous compile, I had a similar problem half a year ago too (debian). I'm not sure anymore what fixed it. FYI: me, my friends and other people I know upgraded to beta19 and run SSL without problems, so I haven't heard of some general issue here... I might ask you for some details later, I'm in a hurry now. |
|
|
Another thing, what version of OpenSSL is this? OpenSSL is a hacker's paradise. Exploits and bugs are found all the time. I won't rule out that the CPU is from normal usage, but it is also possible that someone is exploiting an issue with the version of OpenSSL on the system. As for the SSL errors, those are 99% of the time a normal non-SSL user trying to connect to an SSL port. |
|
|
OpenSSL> OpenSSL> version OpenSSL 0.9.6g 9 Aug 2002 OpenSSL> |
|
|
im not sure how many my friend loaded clones. but he loaded alots of them. about 300~500 ???? on cpu and mem info. I tried to find out. i even looked into kernal files. none found. |
|
|
0.9.6g is a bit old try updateing to 0.9.6l or better 0.9.7c (www.openssl.org) maybe that helps |
|
|
well, im using the most up-to-date debian openssl |
|
|
damn it...... I have an ircd running with NO SSL clients...... only 500~600 NORMAL users on it. the CPU gone up thru roof at 99% and I went edited conf and closed SSL port in the conf.......... I restarted the ircd. the CPU still at low of 3.0% with 533 client right now...... |
|
|
unable to reproduce (at a decent machine, well just a p450.. I was able to reproduce it at a p166.. how.. surprisingly ;p). |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2003-12-18 16:43 | Mouse | New Issue | |
| 2003-12-18 18:13 | AngryWolf | Note Added: 0004373 | |
| 2003-12-18 19:46 | syzop | Note Added: 0004376 | |
| 2003-12-18 23:39 | thilo | Note Added: 0004377 | |
| 2003-12-18 23:41 | thilo | Note Edited: 0004377 | |
| 2003-12-19 00:35 | syzop | Note Added: 0004378 | |
| 2003-12-19 05:38 |
|
Note Added: 0004379 | |
| 2003-12-19 08:44 | Mouse | Note Added: 0004381 | |
| 2003-12-19 09:28 | Mouse | Note Added: 0004383 | |
| 2003-12-19 10:47 | penna22 | Note Added: 0004384 | |
| 2003-12-19 11:15 | thilo | Note Added: 0004385 | |
| 2003-12-22 03:14 | Mouse | Note Added: 0004410 | |
| 2004-02-01 02:45 | syzop | Status | new => closed |
| 2004-02-01 02:45 | syzop | Note Added: 0004835 |
