Crash in Version 2.4.57 with OpenSSL 3.1.4
Soujanya Rai <[email protected]> Thu, 27 Mar 2025 23:51:10 +0530
| Newsgroups | gmane.comp.apache.user |
|---|---|
| Message-ID | <CAMODtfL8Sc7wtVcvxnbsZCnQ98SzfaW-S+f+tu5ANzjYMQUfSA@mail.gmail.com> |
Hello, Apache HTTP Version: 2.4.57 In our Org, we are currently in the process of upgrading OpenSSL version to 3.1.6 and httpd is being run as a multi-threaded process. Occasionally we are seeing crashes with backtrace in the OpenSSL code, usually related to double-freeing of OpenSSL structures. From our communications with OpenSSL devs, it is due to multiple threads accessing/modifying non-thread-safe structures in OpenSSL library. As per them, the onus is on the application to ensure thread safety. Are we aware of any such issue with multi-threading with the latest version of OpenSSL 3.x? Is there any additional config changes required in the Apache code to support it? Thank you for your time, smrai