Laurent FACQ - 21/12/2004 - facq@u-bordeaux.fr

possible incompatibility between mod_ssl and zend debugger

under gnu/linux debian woody 
Apache/1.3.26 (Unix) Debian GNU/Linux PHP/4.1.2 mod_ssl/2.8.9 OpenSSL/0.9.6c

when trying to use
SSLVerifyClient require
or 
SSLVerifyClient optional

the browser reply with 'document contains no data'
and i see the apache child process doing a segementation fault after 'SSLv3 flush data' :
(Using SSLLogLevel trace)

[21/Dec/2004 12:02:37 00689] [info]  Connection to child 2 established (server services.u-bordeaux.fr:443, client 147.210.253.77)
[21/Dec/2004 12:02:37 00689] [info]  Seeding PRNG with 0 bytes of entropy
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Handshake: start
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: before/accept initialization
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 read client hello A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write server hello A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write certificate A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write server done A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 flush data
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 read client key exchange A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 read finished A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write change cipher spec A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write finished A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 flush data
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Handshake: done
[21/Dec/2004 12:02:37 00689] [info]  Connection: Client IP: 147.210.253.77, Protocol: TLSv1, Cipher: RC4-MD5 (128/128 bits)
[21/Dec/2004 12:02:37 00689] [info]  Initial (No.1) HTTPS request received for child 2 (server services.u-bordeaux.fr:443)
[21/Dec/2004 12:02:37 00689] [trace] Changed client verification type will force renegotiation
[21/Dec/2004 12:02:37 00689] [info]  Requesting connection re-negotiation
[21/Dec/2004 12:02:37 00689] [trace] Performing full renegotiation: complete handshake protocol
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Handshake: start
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSL renegotiate ciphers
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write hello request A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 flush data
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write hello request C
[21/Dec/2004 12:02:37 00689] [info]  Awaiting re-negotiation handshake
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Handshake: start
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: before accept initialization
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 read client hello A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write server hello A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write certificate A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 write certificate request A
[21/Dec/2004 12:02:37 00689] [trace] OpenSSL: Loop: SSLv3 flush data
==> segfault

i commented out zend debugger in /etc/php4/apache/php.ini

;[Zend]
;zend_debugger.expose_remotely=allowed_hosts
;zend_gui_password=...
;zend_ini_modifier=/usr/local/Zend/sbin/ini_modifier
;zend_debugger.allow_hosts=...
;zend_debugger.deny_hosts=
;zend_server.allow_hosts=...
;zend_server.deny_hosts=
;zend_root_dir=/usr/local/Zend
;zend_server.apache_error_log=/var/log/apache/error.log
;zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-2.5.2
;zend_extension_manager.debug_server=/usr/local/Zend/lib/Debugger-3.5.0
;zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-2.5.2
;zend_extension_manager.debug_server_ts=/usr/local/Zend/lib/Debugger_TS-3.5.0
;zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so
;zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so

and now it works fine...