Arch Linux

sporkexec

Member

Registered: 2011-04-23

Posts: 9

[SOLVED] SSL broken in Apache i686

A coworker had this problem and I confirmed it with a clean i686 install in VirtualBox. No changes to the defaults were made other than to enable SSL (uncommented the include line in httpd.conf) and generate a self-signed key (from here with the appropriate changes for Arch).
Between Chrome, Firefox, wget, curl, and links, nothing can establish a connection. I just get variations of "SSL error," "SSL connection error," and "The connection was interrupted" with no specific error ever mentioned.
Nothing interesting in the error logs and netstat shows that port 443 is indeed bound to Apache.

The exact same procedure works perfectly on x86_64, however.
I'd be happy to go digging deeper with telnet/netcat if anybody knows how to speak SSL.

Is this upstream or should I file a bug here or am I missing something?
Please let me know if I can do anything else to help.
Thanks!

[EDIT]: It works fine with vanilla sources and the nearly exact same configuration (removed module lines since modules are built-in by default). I guess I'll start hacking at the PKGBUILD, although removing the patches didn't fix it...

[EDIT 2]: Yay, they finally updated it in ABS! No major changes and it still fails, though.
I've pared the latest PKGBUILD down to basically a vanilla build and I still get the problem:

# $Id: PKGBUILD 123237 2011-05-09 13:25:58Z jgc $
# Maintainer: Jan de Groot <jgc@archlinux.org>
# Contributor: Andrea Scarpino <andrea@archlinux.org>
# Contributor: Pierre Schmitz <pierre@archlinux.de>

pkgname=apache
pkgver=2.2.17
pkgrel=2
pkgdesc='A high performance Unix-based HTTP server'
arch=('i686' 'x86_64')
source=(http://www.apache.org/dist/httpd/httpd-${pkgver}.tar.bz2)
md5sums=('16eadc59ea6b38af33874d300973202e')

build() {
        cd "${srcdir}/httpd-${pkgver}"
        ./configure --enable-ssl --with-ssl
        make
        make DESTDIR="${pkgdir}" install
}

Since it's not laid out in Arch style, I have to fiddle around a bit. Everything goes to /usr/local/apache2 and you just run httpd directly. This PKGBUILD exhibits the same problem. *However,* if I build it manually, it works:

makepkg -o
cd src/httpd-2.2.17
./configure --enable-ssl --with-ssl
make
sudo make install

Apparently something in makepkg is doing it? I assume my stock build environment is sane, besides it originally happened with the official package.

[EDIT 3]: So close... It's something in CFLAGS.

[EDIT 4]:
Solved, -O2 in CFLAGS causes this problem. Change it to -O1 or -O0 and it works.
https://bugs.archlinux.org/task/24198

Last edited by sporkexec (2011-05-10 06:28:18)