[Nut-upsuser] SSL only working in DEBUG mode

[Emilien Kia]

Hello all,

With a really fast lookup, I think it is probably a problem of NSS
initialization (key loading...) .
As the problem occurs only when upsd is forked and as nss is initialized (
https://github.com/networkupstools/nut/blob/master/server/upsd.c#L1008)before
upsd deamonify (
https://github.com/networkupstools/nut/blob/master/server/upsd.c#L1035), I
suspect NSS to not be fork-safe.

I will intend to look more deeply.

Best regards,

Emilien


2015-03-13 13:30 GMT+01:00 Charles Lepple <clepple at gmail.com>:

> On Mar 12, 2015, at 11:55 PM, Melkor Lord <melkor.lord at gmail.com> wrote:
>
> >
> > On Mon, Mar 2, 2015 at 2:39 AM, Charles Lepple <clepple at gmail.com>
> wrote:
> >
> > > I thought start-stop-daemon was involved because it closes
> stdin/stdout file
> > > descriptors after exec()'ing the daemon. I tried "--no-close" option
> to no
> > > avail. After that, I validated the init script working fine with
> > > UPSD_OPTIONS="-D" in /etc/nut/nut.conf.
> >
> > Not strictly the same as closing the file descriptors, but I tried the
> > following:
> >
> >   /sbin/upsd -D >/dev/null 2>&1 < /dev/null
> >
> > And it still worked. So I need to recompile with debugging symbols -
> > the Ubuntu packages did not have them.
> >
> > Sorry to bug you again with this issue but is there any improvement on
> the matter?
>
> No, not yet.
>
> Recompiling with debugging symbols did not reveal anything new. We have
> reached out to the engineer who wrote the NSS code for NUT.
>
> --
> Charles Lepple
> clepple at gmail
>
>
>
>
> _______________________________________________
> Nut-upsuser mailing list
> Nut-upsuser at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/nut-upsuser
>
-------------- section suivante --------------
Une pi�ce jointe HTML a �t� nettoy�e...
URL: <http://lists.alioth.debian.org/pipermail/nut-upsuser/attachments/20150320/3e6efb00/attachment.html>