/ Zope / Apsis / Pound Mailing List / Archive / 2004 / 2004-05 / HTTPS broken

[ << ] [ >> ]

[ Pound 1.7 + OWA / "Weuffel, Thomas" ... ] [ hot reconfiguration / Dennis Allison ... ]

HTTPS broken
=?iso-8859-2?Q?Heged=FCs?= Ervin <airween(at)axelero.hu>
2004-05-10 11:31:29 [ FULL ]
hello there,

i installed a pound in https mode. the service runs correctly,
and people should test it today...

i see that, and pound don't accept the request in https, just
http. in syslog there is nothing.

i tested with nmap, and seems 443 tcp is open.

i see with fuser, the pids of the process, what use this port are
from poun.

and so, a simple pound restart resolved the problem....

what may be the problem? is it a known "bug"?


thanks:

a.
[...]

Re: HTTPS broken
Robert Segall <roseg(at)apsis.ch>
2004-05-10 15:23:49 [ FULL ]
On Monday 10 May 2004 11.31, Hegedüs Ervin wrote:[...]

I must admit I don't understand your message at all. Perhaps you could try 
again? If English is a problem perhaps you could write in German, French or 
Italian - but please in a private mail to me, not to the group. I'll deal 
with the translation.[...]

Re: HTTPS broken
Hegedus Ervin <airween(at)axelero.hu>
2004-05-10 16:42:28 [ FULL ]
hello,
[...]
sorry for my english - when i read my message, i also didn't
understand... :)

so, there is a pound on a server, i installed it on last week, on
thursday. the pound works fine, when we tested it.

today the people ask me, why pound doesn't work.

i see that, pound runs in more process, on the server the tcp 443
is
open, and when i checked who uses that port, i find pound pids.


but, the browsers can't access the backend servers, and there is
nothing in the syslog. (!)
if users try on http, not https, they can access the backend
servers.

when i restarted the pound, the problem solved...


now, do you understand?


thanks:

air

Re: HTTPS broken
Robert Segall <roseg(at)apsis.ch>
2004-05-10 17:40:53 [ FULL ]
On Monday 10 May 2004 16.42, Hegedus Ervin wrote:[...]

Fully tested? Inclusive of HTTPS, various browsers, etc?
[...]

What processes exactly? How many of them? Normally there should be exactly ONE 
process listening on 443. If you have more than one than you know what the 
problem is.
[...]

Sounds like you have other processes competing for 443 - possibly something 
started after Pound (Pound refuses to start if it finds the port is in use). 
May be something started automatically at boot time (did you do a reboot?) or 
in crontab or similar.[...]

Re: HTTPS broken
Hegedus Ervin <airween(at)axelero.hu>
2004-05-10 18:55:28 [ FULL ]
hello,
[...]
yes, of course.
[...]
??
what dou you mean?
all process names were /usr/local/sbin/pound.
[...]
i don't remember exactly, they were about 6.
[...]
okay.

then, here is the new question: why starts pound many processes,
not just one?
[...]
i understand.
[...]
i think we exclude all cases.

pound starts at boot time, but the last boot was more, than 30
days. pound was installed at last week, i started it then, and it
works fine at last week.

there is no any command in crontab, and - i hope - nobody starts
other process.


look at this output of commands:
# ps ax | grep pound
27871 ?        S      0:00 /usr/local/sbin/pound
27873 ?        S      0:00 /usr/local/sbin/pound
27874 ?        S      0:00 /usr/local/sbin/pound
27875 ?        S      0:00 /usr/local/sbin/pound
27876 ?        S      0:00 /usr/local/sbin/pound
27877 ?        S      6:10 /usr/local/sbin/pound

# /etc/init.d/pound restart; tail -f /var/log/syslog
Stopping pound HTTPS proxy: done.
Starting pound HTTPS proxy: done.
...
May 10 18:27:05 proxy -- MARK --
May 10 18:41:00 proxy pound: received signal 15 - exiting...
May 10 18:41:00 proxy pound: received signal 15 - exiting...
May 10 18:41:01 proxy pound: starting...

# ps ax |  grep pound
27973 pts/0    S      0:00 /usr/local/sbin/pound
27975 pts/0    S      0:00 /usr/local/sbin/pound
27976 pts/0    S      0:00 /usr/local/sbin/pound
27977 pts/0    S      0:00 /usr/local/sbin/pound
27978 pts/0    S      0:00 /usr/local/sbin/pound
27979 pts/0    S      0:04 /usr/local/sbin/pound

as you can see, after restart there are many process again, and
all process has new pid.


here is the relevant part of init script:

===========
#!/bin/bash

checkpid()...

case $1 in
        start)
		if [ checkpid() ]; then
			echo -n "Starting pound HTTPS proxy: "
			/usr/local/sbin/pound
			sleep 1
			if [ ! checkpid() ]; then
				echo "failed."
			else
				echo "done."
			fi
		else
			echo "Pound is already running."
		fi
		;;
...
===========

i try to start from simple command line (after i stopped it all
process)

# /usr/local/sbin/pound; tail -f /var/log/syslog
May 10 18:48:22 proxy pound: starting...

# ps ax | grep pound
28044 pts/0    S      0:00 /usr/local/sbin/pound
28046 pts/0    S      0:00 /usr/local/sbin/pound
28047 pts/0    S      0:00 /usr/local/sbin/pound
28048 pts/0    S      0:00 /usr/local/sbin/pound
28049 pts/0    S      0:00 /usr/local/sbin/pound
28050 pts/0    S      0:04 /usr/local/sbin/pound


there is one pid file in /var/run, its name is
pound_pid.lowest_pound_pid_number, in this case it called
pound_pid.28044


i compiling pound with these options (configure options):
./configure --with-ssl --enable-msdav --enable-unsafe



any tip?


thanks:

air

Re: HTTPS broken
Dennis Allison <allison(at)sumeru.stanford.EDU>
2004-05-10 19:03:30 [ FULL ]
Hegedus -- 
What Linux OS are you using?  What kernel?  Which threading library?
These may be relevant to your problem.

On Mon, 10 May 2004, Hegedus Ervin wrote:
[...]

Re: HTTPS broken
Hegedus Ervin <airween(at)axelero.hu>
2004-05-10 19:10:17 [ FULL ]
> What Linux OS are you using?
Debian 3.0, aka Woody
[...]
2.4.26
[...]
i remember it is pthred - i don't know the version, i installed
it from package. (the host is in an intranet - i don't access it
at all time)
[...]
yes, i think about that, i wrote my configure options for these
things...


thanks:

a.

Re: HTTPS broken
Robert Segall <roseg(at)apsis.ch>
2004-05-11 14:05:46 [ FULL ]
On Linux it is normal for Pound to start several processes - threads are 
internally implemented as processes in the threading library.

Please check that Pound is really stopped when you stop it: try stopping and 
see if any processes are left running. Kill them as necessary. Once they are 
exterminated start Pound again.[...]

MailBoxer