coova / coova-chilli

CoovaChilli is an open-source software access controller for captive portal hotspots.
Other
516 stars 258 forks source link

[redir-ssl] keep getting "openssl_read(536): --- SSL_read() = -1" until device runs out of memory #451

Closed nemesifier closed 5 years ago

nemesifier commented 6 years ago

I compiled the latest master on OpenWRT 18.06 (https://github.com/openwisp/coova-chilli-openwrt), with OpenSSL and the redir server enabled.

The options redirssl, radsec, redir and nochallenge are enabled.

Here's how I can reproduce the issue:

  1. I connect two devices to the wifi which is associated to the chilli process
  2. I try to open an HTTPs page when still unauthenticated
  3. if it works I try again on the other phone, but some times this step is not necessary for the following result to arise:

I keep seeing an infinite stream of lines like:

user.debug : openssl_read(536): --- SSL_read() = -1

After a while the device runs out of memory: -ash: can't fork: Out of memory.

The issue disappears if I turn off redirssl.

Does anybody have an idea of what is happening?

nemesifier commented 5 years ago

Fixed by #453