Crash in Version 2.4.57 with OpenSSL 3.1.4

Soujanya Rai <[email protected]> Thu, 27 Mar 2025 23:51:10 +0530
Newsgroups gmane.comp.apache.user
Message-ID <CAMODtfL8Sc7wtVcvxnbsZCnQ98SzfaW-S+f+tu5ANzjYMQUfSA@mail.gmail.com>
Hello,

Apache HTTP Version: 2.4.57

In our Org, we are currently in the process of upgrading OpenSSL
version to 3.1.6 and httpd is being run as a multi-threaded process.

Occasionally we are seeing crashes with backtrace in the OpenSSL code,
usually related to double-freeing of OpenSSL structures. From our
communications with OpenSSL devs, it is due to multiple threads
accessing/modifying non-thread-safe structures in OpenSSL library. As
per them, the onus is on the application to ensure thread safety.

Are we aware of any such issue with multi-threading with the latest
version of OpenSSL 3.x?
Is there any additional config changes required in the Apache code to
support it?

Thank you for your time,
smrai