Forum OpenACS Development: Re: Fatal Signal 11 with nsssl Naviserver

Thanks for your help!

OpenSSL 1.0.2
Naviserver 4.99.6
Tcl 8.5.17
Tcllib 1.15
Thread 2.7.0
Xotcl 2.0.0
tDOM 0.8.3
Postgresql 9.4.0

I used the default openacs config for nsssl

example here

ns_section "ns/server/${server}/module/nsssl"
ns_param address $address
ns_param port $httpsport
ns_param ciphers "RC4:HIGH:!aNULL:!MD5;"
ns_param protocols "!SSLv2"
ns_param certificate $serverroot/etc/cert-includeskey.pem

ns_param verify 0
ns_param writerthreads 5
ns_param writersize 10
ns_param writerbufsize 16384 ;# 8192, buffer size for writer threads
ns_param writerstreaming true ;# false
ns_param deferaccept true ;# false, Performance optimization
ns_param maxinput [expr {$max_file_upload_mb * 1024*1024}] ;# Maximum File Size for uploads in bytes

Dear Dave,

i've downloaded, compiled and installed OpenSSL 1.0.2 and built it with the released versions of NaviServer and nsssl.
The error log says:

[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: modload: loading module nsssl from file nsssl.so
[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: nsssl: enable 0 spooler thread(s) 
[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: nsssl: enable 0 writer thread(s) 
[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: nsssl: disabling SSLv2
[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: nsssl: version 0.5 loaded, based on OpenSSL 1.0.2 22 Jan 2015
[28/Jan/2015:20:58:11][681.7ff035690700][-main-] Notice: XOTcl 2.0.0 loaded

so, loading the nsopenssl module is fine here (Ubuntu 12.04). However, furing build, i got the following message:

/usr/bin/ld: /usr/local/ssl/lib/libssl.a(s23_srvr.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC
/usr/local/ssl/lib/libssl.a: could not read symbols: Bad value

After adding -fPIC to the Makefile (generated from config), and rebuilding everything, linking was ok.
Can it be, that there was a similar problem at your site?

-g