cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: certification error issue after running for a few cycles on Solaris

From: Fei Yan <skyscribe.yf_at_gmail.com>
Date: Thu, 16 Dec 2010 20:52:31 +0800

>
>
> Date: Wed, 15 Dec 2010 23:45:07 +0100 (CET)
> From: Daniel Stenberg <daniel_at_haxx.se>
> To: libcurl development <curl-library_at_cool.haxx.se>
> Subject: Re: certification error issue after running for a few cycles
> on Solaris
> Message-ID: <alpine.DEB.2.00.1012152341260.11415_at_tvnag.unkk.fr>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
> On Wed, 15 Dec 2010, Fei Yan wrote:
>
> >> What libcurl version? What OpenSSL version?
> >
> > We use libcurl 7.21.2 and openssl 0.9.8o.
>
> Spanking new, should be pretty good...
>
> >> I can see that error string getting used at three places in the code. I
> >> think a good idea would be for you to figure out exactly which of those
> >> errors you get.
> >
> > That means rebuilding the library, right?
>
> Yes, with debug option enabled and either setting a break-point or by
> adding
> more infof/printf outputs in there.
>
> > Can we workaround that or is it needed to add some trace code in the
> > ssluse.c?
>
> It will be valuable to fully understand which function call that returns
> the
> error that causes the output. Then we take it one step more backwards and
> start figuring out WHY that function fails.
>

Based on my understanding, the code path should be quite clear, that's the
file_type branch on PEM. OpenSSL man page shows this as invalid file path
passed in, but it's probably a performance issue as it don't reproduce at
low transfer profiles.

We tried that with 1K uploading per 5 minutes, no issue occurred, but when
the load increased to 1.5K uploads, around 27~40 of them got such error.

This issue is not quite easy to reproduce, you may know, rebuilding the
library linking the application and testing under performance load might be
quite time killing. Anyway let me check again tomorrow morning with your
suggestions and see what we get.

>
> But lets start with identifying the culprit!
>
> --
>

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2010-12-16