crash in libcrypto.so.1.0.0

Bug #1559600 reported by Ralf Hildebrandt
18
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openvpn (Ubuntu)
Expired
High
Unassigned

Bug Description

Starting openvpn with a known good config results in:

Sun Mar 20 00:53:47 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016
Sun Mar 20 00:53:47 2016 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Enter Auth Username: ******
Enter Auth Password: ********
Sun Mar 20 00:53:51 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Mar 20 00:53:51 2016 Control Channel Authentication: using 'static_key.pem' as a OpenVPN static key file
Sun Mar 20 00:53:51 2016 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Mar 20 00:53:51 2016 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Mar 20 00:53:51 2016 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Mar 20 00:53:51 2016 UDPv4 link local: [undef]
Sun Mar 20 00:53:51 2016 UDPv4 link remote: [AF_INET]193.175.73.200:1194
Sun Mar 20 00:53:51 2016 TLS: Initial packet from [AF_INET]193.175.73.200:1194, sid=e2786191 320d26b2
Sun Mar 20 00:53:51 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Mar 20 00:53:51 2016 VERIFY OK: depth=1, C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=Charite-VPN CA, name=EasyRSA, <email address hidden>
Sun Mar 20 00:53:51 2016 VERIFY OK: nsCertType=SERVER
Sun Mar 20 00:53:51 2016 Validating certificate extended key usage
Sun Mar 20 00:53:51 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Mar 20 00:53:51 2016 VERIFY EKU OK
Sun Mar 20 00:53:51 2016 VERIFY X509NAME OK: C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=openvpn.charite.de, <email address hidden>
Sun Mar 20 00:53:51 2016 VERIFY OK: depth=0, C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=openvpn.charite.de, <email address hidden>
Mar 20 00:53:51 humbaba kernel: [ 4676.625472] openvpn[10475]: segfault at 7f4238240280 ip 00007f4237e8474a sp 00007fffd671f8e0 error 7 in libcrypto.so.1.0.0[7f4237e1d000+21a000]

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: openvpn 2.3.10-1ubuntu2
ProcVersionSignature: Ubuntu 4.4.0-14.30-generic 4.4.5
Uname: Linux 4.4.0-14-generic x86_64
ApportVersion: 2.20-0ubuntu3
Architecture: amd64
Date: Sun Mar 20 00:54:20 2016
InstallationDate: Installed on 2014-02-07 (771 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
ProcEnviron:
 LANGUAGE=en
 TERM=xterm-256color
 PATH=(custom, no user)
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: Upgraded to xenial on 2016-02-27 (21 days ago)

Revision history for this message
Ralf Hildebrandt (ralf-hildebrandt) wrote :
Tyler Hicks (tyhicks)
information type: Private Security → Public
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Hi Ralf,
Thank you for taking the time to report this bug and helping to make Ubuntu better!

I experimented with openvpn on 16.04 this morning and never hit the issue in my cases.

To help debugging it could you either share more of your config and provide the crash data that apport should have catched on that crash.
Should be "apport-collect BUGNUMBER" so in this case "apport-collect 1559600"

This will process the crash that should be in /var/crash/ and upload it to that bug.

Changed in openvpn (Ubuntu):
status: New → Incomplete
importance: Undecided → High
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Very similar bug had (closed as dup):

StacktraceTop:
 OBJ_find_sigid_by_algs () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0
 ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0
 ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0
 ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0
 ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0
Title: openvpn crashed with SIGSEGV in OBJ_find_sigid_by_algs()

Status for this didn't change - needing more debug data and setup details to try to recreate.

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for openvpn (Ubuntu) because there has been no activity for 60 days.]

Changed in openvpn (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.