SEGFAULT on RHEL9 when using metadata downloaded via HTTPS

[Luca 'remix_tj' Lorenzetto]

On Tue, Mar 14, 2023 at 6:50 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> On Rocky 9, basic testing is not showing any trouble with InCommon's feed over https.

Hello, can you try with this metadataprovider conf?

<MetadataProvider id="spid" type="XML"
url="https://demo.spid.gov.it/metadata.xml"
backingFilePath="metadata.xml" maxRefreshDelay="7200" />

Anyway looks like that shibd on my host links to different libs:

[root at shibserver /]# ldd /usr/sbin/shibd
    linux-vdso.so.1 (0x00007fff5927b000)
    libshibsp.so.11 => /lib64/libshibsp.so.11 (0x00007f1e3edc3000)
    libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f1e3ece5000)
    libxerces-c-3.2.so => /lib64/libxerces-c-3.2.so (0x00007f1e3e963000)
    libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007f1e3e73c000)
    libc.so.6 => /lib64/libc.so.6 (0x00007f1e3e533000)
    libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f1e3e4dc000)
    liblog4shib.so.2 => /lib64/liblog4shib.so.2 (0x00007f1e3e2a2000)
    libsaml.so.12 => /lib64/libsaml.so.12 (0x00007f1e3d7b5000)
    libxml-security-c.so.20 => /lib64/libxml-security-c.so.20
(0x00007f1e3d519000)
    libxmltooling.so.10 => /lib64/libxmltooling.so.10 (0x00007f1e3cf9d000)
    libm.so.6 => /lib64/libm.so.6 (0x00007f1e3cec2000)
    libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f1e3cea7000)
    liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f1e3ce79000)
    libzstd.so.1 => /lib64/libzstd.so.1 (0x00007f1e3cda2000)
    liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f1e3cd7e000)
    libcap.so.2 => /lib64/libcap.so.2 (0x00007f1e3cd74000)
    libgcrypt.so.20 => /lib64/libgcrypt.so.20 (0x00007f1e3cc37000)
    /lib64/ld-linux-x86-64.so.2 (0x00007f1e3f028000)
    libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f1e3cb59000)
    libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f1e3cb3e000)
    libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f1e3cb37000)
    libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f1e3cb26000)
    libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f1e3cb1f000)
    libcrypto.so.3 => /lib64/libcrypto.so.3 (0x00007f1e3c6f2000)
    libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f1e3c6de000)
    libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f1e3c6d7000)
    libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f1e3c3ea000)
    libcurl.so.4 => /lib64/libcurl.so.4 (0x00007f1e3c349000)
    libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007f1e3c2ad000)
    libz.so.1 => /lib64/libz.so.1 (0x00007f1e3c293000)
    libdl.so.2 => /lib64/libdl.so.2 (0x00007f1e3c28e000)
    libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f1e3c266000)
    libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f1e3c239000)
    libnghttp2.so.14 => /lib64/libnghttp2.so.14 (0x00007f1e3c20f000)
    libidn2.so.0 => /lib64/libidn2.so.0 (0x00007f1e3c1ee000)
    libssh.so.4 => /lib64/libssh.so.4 (0x00007f1e3c17f000)
    libpsl.so.5 => /lib64/libpsl.so.5 (0x00007f1e3c169000)
    libssl.so.3 => /lib64/libssl.so.3 (0x00007f1e3c0c4000)
    libldap.so.2 => /lib64/libldap.so.2 (0x00007f1e3c05d000)
    liblber.so.2 => /lib64/liblber.so.2 (0x00007f1e3c04b000)
    libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x00007f1e3c03d000)
    libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007f1e3bfa1000)
    libunistring.so.2 => /lib64/libunistring.so.2 (0x00007f1e3be1a000)
    libevent-2.1.so.7 => /lib64/libevent-2.1.so.7 (0x00007f1e3bdc1000)
    libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f1e3bda1000)
    libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x00007f1e3bd7e000)
    libcrypt.so.2 => /lib64/libcrypt.so.2 (0x00007f1e3bd44000)

i see multiple libcrypto.so here...


-- 
"E' assurdo impiegare gli uomini di intelligenza eccellente per fare
calcoli che potrebbero essere affidati a chiunque se si usassero delle
macchine"
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <lorenzetto.luca at gmail.com>