Re: Hundreds of crypto file descriptors for Apache httpd

[Frank Wille <frank%phoenix.owl.de@localhost>]

Jeffrey Walton wrote:

> On Tue, Mar 10, 2020 at 6:57 AM Frank Wille <frank%phoenix.owl.de@localhost>
> wrote:
>> But is it normal to create more than 200 crypto file descriptors for
>> each httpd process? Then I would have to recompile PHP with a larger
>> FD_SETSIZE, as it seems?
>
> If it is OpenSSL and /dev/crypto handles, then something sounds a bit
> sideways. OpenSSL is supposed to open the device once and share it
> internally.

Strange. Maybe OpenSSL and/or PHP was started repeatedly by Apache?


> I'm not sure what to do with OpenSSL 1.0.2 and earlier.

It's OpenSSL 1.0.2k here.


-- 
Frank Wille