[Fedora-directory-users] Error starting SSL enabled Admin-Server Segmentation fault (11)

[Rich Megginson]

James Chavez wrote:
> Hello,
> I have 2 servers running FDS.
> I have setup My directory servers to use SSL for the directory server
> and Admin server. For my problem server I generated both the directory
> server cert and admin server cert on  the directory server acting as the
> CA. I exported the Server-Cert2, server-cert2 in .p12 format and I
> imported them as well as the CA cert into both the admin server and
> directory server. I am able to establish SSL client sessions to the
> directory server but I cannot login to the admin server through the
> GUI. 
> I was able to login fine before enabling SSL...Unlike on this server,
> the server acting as the root CA everything works fine.
>
> I get the following error at the GUI login screen.
>  authenticating User ID "cn=Directory Manager"
> java.io.InterruptedIOException: HTTP response timeout
>
> In the error log I have this. The directory server that I can log into I
> get the same messages but not the segmentation fault. 
>
>
> [notice] caught SIGTERM, shutting down
> [notice] Access Host filter is: *.fedora
> [notice] Access Address filter is: *
> [notice] Access Host filter is: *.fedora
> [notice] Access Address filter is: *
> [error] SSL_InheritMPServerSIDCache failed
> [error] SSL Library Error: -8191 Library Failure
> [notice] Apache/2.2.8 (Unix) configured -- resuming normal operations
> [notice] child pid 3284 exit signal Segmentation fault (11)
>   
What platform?  What version of fedora-ds-admin?
rpm -qi fedora-ds-admin
> Here are my Cert data bases
>
> [root at scooby ~]# certutil -L -d /etc/dirsrv/admin-serv/
>
> Certificate Nickname                                         Trust
> Attributes
>
> SSL,S/MIME,JAR/XPI
>
> CA certificate                                               CT,, 
> server-cert2                                                 u,u,u
> [root at scooby ~]# certutil -L -d /etc/dirsrv/slapd-scooby/
>
> Certificate Nickname                                         Trust
> Attributes
>
> SSL,S/MIME,JAR/XPI
>
> CA certificate                                               CT,, 
> Server-Cert2                                                 u,u,u
>
>
>
>
>
>
> Any ideas.
>
> Thanks
> James
>
> CONFIDENTIALITY
> This e-mail message and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail message, you are hereby notified that any dissemination, distribution or copying of this e-mail message, and any attachments thereto, is strictly prohibited.  If you have received this e-mail message in error, please immediately notify the sender and permanently delete the original and any copies of this email and any prints thereof.
> ABSENT AN EXPRESS STATEMENT TO THE CONTRARY HEREINABOVE, THIS E-MAIL IS NOT INTENDED AS A SUBSTITUTE FOR A WRITING.  Notwithstanding the Uniform Electronic Transactions Act or the applicability of any other law of similar substance and effect, absent an express statement to the contrary hereinabove, this e-mail message its contents, and any attachments hereto are not intended to represent an offer or acceptance to enter into a contract and are not otherwise intended to bind the sender, Sanmina-SCI Corporation (or any of its subsidiaries), or any other person or entity.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20081209/d75ade9b/attachment.bin>