-
Notifications
You must be signed in to change notification settings - Fork 2.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
dtls集成,nginx发生崩溃 #1951
Comments
使用debug编译选项,重现后,输出core文件的stack trace。 |
补充(尝试不同版本openssl都失败,系统centos7、rocklinux9都试过。每次崩溃点不一样,以下截取部分供参考): warning: Can't open file /dev/zero (deleted) during file-backed mapping note processing |
error log设置 debug 级别,ssl建链失败的具体错误信息。 |
配置: 补充debug日志: coredump(每次不同崩溃点): |
从stack看ngx_dtls_read收包时有异常,打开 error log的debug 日志级别,看下具体的报错信息。 |
备注:尝试多个环境、多个tengine版本(包括最初支持dtls的2.3.3版本)&多个openssl版本 均失败告终。dtls功能应该是一直不能使用,期待该bug解决和新版本。 |
1、tengine3.1.0版本(历史版本尝试,同结果)
2、编译:
./configure
--with-stream --with-stream_ssl_module
--with-http_ssl_module
--with-stream_sni
3、配置:
stream {
server {
listen 1443 reuseport ssl udp;
ssl_protocols dtlsv1.2;
ssl_certificate **.com.pem;
ssl_certificate_key **.com.key;
return "ok";
}
}
4、崩溃日志
2024/08/04 00:42:03 [alert] 1099847#0: worker process 1099848 exited on signal 11 (core dumped)
2024/08/04 00:42:03 [error] 1099909#0: *2 unexcepted message of dtls session while SSL handshaking, udp client: 127.0.0.1, server: 0.0.0.0:1443
[137994.251479] nginx[1099848]: segfault at 7fff6769fff8 ip 00007f40f0dc0a88 sp 00007fff676a0000 error 6 in libcrypto.so.3.0.7[7f40f0cad000+25c000] likely on CPU 5 (core 2, socket 1)
[137994.251491] Code: e7 ac 17 00 e9 b9 46 ff ff 66 0f 1f 84 00 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 48 83 ec 08 03 d1 ee ff 85 c0 0f 94 c0 48 83 c4 08 0f b6 c0 c3 66 0f 1f 44
The text was updated successfully, but these errors were encountered: