SSLH crashes randomly

[His.Dudeness]

Hi,
a while ago I switched from OpenVPN "port-share" to SSLH to run OpenVPN and HAProxy both on the same IP with TCP 443.
It works great but every other week or so SSLH crashes and I have to log in to OpenVPN GUI and start the service.

Does anyone know how to troubleshoot this?

cheers
Michael

[Patrick M. Hausen]

Nothing in the log?

[His.Dudeness]

Hi Patrick
thanks for your reply!

SSLH doesn't seem to have its own log file. In the "general" log I found only this:

Notice   kernel   <6>pid 50171 (sslh-select), jid 0, uid 65534: exited on signal 11 (no core dump - bad address)

cheers
Michael

[Seimus]

You log is the answer

(no core dump - bad address) is pointing to a faulty address in memory, most likely your RAM is bad.

Regards,
S.

[His.Dudeness]

Hm, SSLH is the ONLY process that constantly crashes, and it started to do so right after I added it to a setup that had been running for several years before.
 
I really can't imagine how bad RAM could only affect one particular process and always only the same?

[Patrick M. Hausen]

Have you looked at the upstream project (github?) for any open issues?

[His.Dudeness]

Have you looked at the upstream project (github?) for any open issues?

Just had a quick look at the open issues at their github page but I don't think that there is one that fits my symptoms.

Does anyone know when the SSLH plugin on OPNsense received the last update?

[Patrick M. Hausen]

2 years ago:

https://github.com/opnsense/plugins/tree/master/net/sslh

[His.Dudeness]

Hm, SSLH itself seems to get updates from time to time.

Should I open an issue in the opnsense/plugins github?

[Patrick M. Hausen]

Cannot hurt 😉

[His.Dudeness]

OK, I'll try that.  :-)

The sad part is: I wouldn't even need SSLH if someone hadn't decided to remove the ability to add the OpenVPN "port-share" option after the switch to OpenVPN instances :-| 

[Patrick M. Hausen]

sslh is so much quicker I would not bother with OpenVPN port sharing.