libapache2-mod-chroot: php5 ssl connection to postgresql is broken with a chroot apache2.2 server

[Michael Ablassmeier]

forwarded 406650 ***@core.segfault.pl
thanks

hi,

I'm using a chroot apache2.2 web server with libapache2-mod-chroot but
i obtain this result in php log when i try to connect to my postgresql
PHP Warning: pg_connect() [<a >href='function.pg-connect'>function.pg-connect</a>]: Unable to connect
to PostgreSQL server: SSL SYSCALL error: Success in /www/test.hpu on line 3
If i change for the same configuration without chroot, the connection is ok
If i use my script test.hpu with php5-cli, ssl and no-ssl connection are working

hm.. ive never connected to postgresql through ssl within a
mod_chroot'ed environment. Forwarding to mod_chroots upstream list. Are
there more errors in apache's error log you could provide (maybe missing
directories in /var/ or the like ..?)

Sorry for the delay in my response, seems your bugreport was eaten by my
spamfilter :)

bye,
- michael

[Marek Gutkowski]

Post by Michael Ablassmeier

I'm using a chroot apache2.2 web server with libapache2-mod-chroot but
i obtain this result in php log when i try to connect to my postgresql
PHP Warning: pg_connect() [<a >href='function.pg-connect'>function.pg-connect</a>]: Unable to connect
to PostgreSQL server: SSL SYSCALL error: Success in /www/test.hpu on line 3
If i change for the same configuration without chroot, the connection is ok
If i use my script test.hpu with php5-cli, ssl and no-ssl connection are working

hm.. ive never connected to postgresql through ssl within a
mod_chroot'ed environment. Forwarding to mod_chroots upstream list. Are
there more errors in apache's error log you could provide (maybe missing
directories in /var/ or the like ..?)
Sorry for the delay in my response, seems your bugreport was eaten by my
spamfilter :)
bye,
- michael

What MPM are you using? Can we see output of strace for the process
that's handling your connection?
If you use a forking MPM, you could set MinSpareServers and StartServers
to 1 and attach strace to the single Apache child you will have.

regards,