OpenSSL internal error

[Ayman Al Shorman]

Hi there,

I got an error from our application server log

ssl_ciph.c(386): OpenSSL internal error, assertion failed:
ssl_mac_secret_size[SSL_MD_MD5_IDX] >= 0.

I have *openssl-1.0.0-27.el6_4.2.x86_64* and
*openssl-devel-1.0.0-27.el6_4.2.x86_64* installed on centos 6.3.

There is no special case to reproduce the error and the problem is the
application server is crashing from time to time.

Please advise asap.


Thank you



[image: Bayt.com] <http://www.bayt.com/>*Ayman Al Shorman*
System Administrator
Bayt.com - Riyadh, Saudi ArabiaDirect: +966.11.2503446 Mobile:
+966.5.56089148Home <http://www.bayt.com/> | About
Bayt.com<http://www.bayt.com/en/about-us>
| Find Jobs <http://www.bayt.com/en/job-search/> | Recruiting
Solutions<http://www.bayt.com/en/home-emp/>
| Online Advertising <http://www.bayt.com/en/advertise/> |
People<http://people.bayt.com/>
| Salaries <http://www.bayt.com/en/salaries/>
The information contained above is proprietary to Bayt.com

[Viktor Dukhovni]

Post by Ayman Al Shorman
ssl_mac_secret_size[SSL_MD_MD5_IDX] >= 0.
I have *openssl-1.0.0-27.el6_4.2.x86_64* and
*openssl-devel-1.0.0-27.el6_4.2.x86_64* installed on centos 6.3.
There is no special case to reproduce the error and the problem is the
application server is crashing from time to time.

This suggests memory corruption, or failure to properly implement
locking in a multi-threaded application.

ssl_digest_methods[SSL_MD_MD5_IDX]=
EVP_get_digestbyname(SN_md5);
ssl_mac_secret_size[SSL_MD_MD5_IDX]=
EVP_MD_size(ssl_digest_methods[SSL_MD_MD5_IDX]);
OPENSSL_assert(ssl_mac_secret_size[SSL_MD_MD5_IDX] >= 0);

The code in above is in ssl_load_ciphers() which is called late
in SSL_library_init(). The latter should be called just once by
your application, before it first uses SSL.