crash in libcrypto.so.1.0.0
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openvpn (Ubuntu) |
Expired
|
High
|
Unassigned |
Bug Description
Starting openvpn with a known good config results in:
Sun Mar 20 00:53:47 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016
Sun Mar 20 00:53:47 2016 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Enter Auth Username: ******
Enter Auth Password: ********
Sun Mar 20 00:53:51 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Mar 20 00:53:51 2016 Control Channel Authentication: using 'static_key.pem' as a OpenVPN static key file
Sun Mar 20 00:53:51 2016 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Mar 20 00:53:51 2016 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun Mar 20 00:53:51 2016 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Mar 20 00:53:51 2016 UDPv4 link local: [undef]
Sun Mar 20 00:53:51 2016 UDPv4 link remote: [AF_INET]
Sun Mar 20 00:53:51 2016 TLS: Initial packet from [AF_INET]
Sun Mar 20 00:53:51 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Mar 20 00:53:51 2016 VERIFY OK: depth=1, C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=Charite-VPN CA, name=EasyRSA, <email address hidden>
Sun Mar 20 00:53:51 2016 VERIFY OK: nsCertType=SERVER
Sun Mar 20 00:53:51 2016 Validating certificate extended key usage
Sun Mar 20 00:53:51 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Mar 20 00:53:51 2016 VERIFY EKU OK
Sun Mar 20 00:53:51 2016 VERIFY X509NAME OK: C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=openvpn.
Sun Mar 20 00:53:51 2016 VERIFY OK: depth=0, C=DE, ST=Berlin, L=Berlin, O=Charite-VPN, OU=GB-IT, CN=openvpn.
Mar 20 00:53:51 humbaba kernel: [ 4676.625472] openvpn[10475]: segfault at 7f4238240280 ip 00007f4237e8474a sp 00007fffd671f8e0 error 7 in libcrypto.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: openvpn 2.3.10-1ubuntu2
ProcVersionSign
Uname: Linux 4.4.0-14-generic x86_64
ApportVersion: 2.20-0ubuntu3
Architecture: amd64
Date: Sun Mar 20 00:54:20 2016
InstallationDate: Installed on 2014-02-07 (771 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
ProcEnviron:
LANGUAGE=en
TERM=xterm-
PATH=(custom, no user)
LANG=de_DE.UTF-8
SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: Upgraded to xenial on 2016-02-27 (21 days ago)
information type: | Private Security → Public |
Hi Ralf,
Thank you for taking the time to report this bug and helping to make Ubuntu better!
I experimented with openvpn on 16.04 this morning and never hit the issue in my cases.
To help debugging it could you either share more of your config and provide the crash data that apport should have catched on that crash.
Should be "apport-collect BUGNUMBER" so in this case "apport-collect 1559600"
This will process the crash that should be in /var/crash/ and upload it to that bug.