{"action":"opened","issue":{"url":"https://api.github.com/repos/rsyslog/librelp/issues/14","labels_url":"https://api.github.com/repos/rsyslog/librelp/issues/14/labels{/name}","comments_url":"https://api.github.com/repos/rsyslog/librelp/issues/14/comments","events_url":"https://api.github.com/repos/rsyslog/librelp/issues/14/events","html_url":"https://github.com/rsyslog/librelp/issues/14","id":86785179,"number":14,"title":"infinite loop wildcard ssl certificate","user":{"login":"kamusin","id":5461214,"avatar_url":"https://avatars.githubusercontent.com/u/5461214?v=3","gravatar_id":"","url":"https://api.github.com/users/kamusin","html_url":"https://github.com/kamusin","followers_url":"https://api.github.com/users/kamusin/followers","following_url":"https://api.github.com/users/kamusin/following{/other_user}","gists_url":"https://api.github.com/users/kamusin/gists{/gist_id}","starred_url":"https://api.github.com/users/kamusin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kamusin/subscriptions","organizations_url":"https://api.github.com/users/kamusin/orgs","repos_url":"https://api.github.com/users/kamusin/repos","events_url":"https://api.github.com/users/kamusin/events{/privacy}","received_events_url":"https://api.github.com/users/kamusin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-10T00:42:06Z","updated_at":"2015-06-10T00:42:06Z","closed_at":null,"body":"For some reason our rsyslog clients are entering in a never ending loop when we are using a commercial wildcard certificate. These are the last messages before to use 99% CPU and entering to this loop (I had to make a hard reboot to recover this server):\r\n\r\n6176.209422062:main Q:Reg/w0  : actionDoRetry: action 0 action->tryResume returned -2006\r\n6176.209424345:main Q:Reg/w0  : actionDoRetry: action 0 enter loop, iRetries=0\r\n6176.209426542:main Q:Reg/w0  : actionDoRetry: action 0 action->tryResume returned -2006\r\n6176.209432848:main Q:Reg/w0  : actionDoRetry: action 0 enter loop, iRetries=0\r\n6176.209435220:main Q:Reg/w0  : actionDoRetry: action 0 action->tryResume returned -2006\r\n6176.209437513:main Q:Reg/w0  : actionDoRetry: action 0 enter loop, iRetries=0\r\n6176.209439703:main Q:Reg/w0  : actionDoRetry: action 0 action->tryResume returned -2006\r\n\r\nUnfortunately this issue is not reproducible when we use our own certificates (generated locally in rsyslog server).\r\n\r\nServer software version:\r\nrsyslog-8.10.0.ad1-1.el7.x86_64\r\nrsyslog-relp-8.10.0.ad1-1.el7.x86_64\r\n\r\nClient:\r\nrsyslog-relp-8.10.0.ad1-1.el7.x86_64\r\nrsyslog-8.10.0.ad1-1.el7.x86_64\r\n\r\nClient config:\r\n#### MODULES ####\r\n\r\nmodule(load=\"imuxsock\") # provides support for local system logging (e.g. via logger command)\r\nmodule(load=\"imklog\")   # provides kernel logging support (previously done by rklogd)\r\nmodule(load=\"imfile\")   # loaded once for file input module\r\nmodule(load=\"omrelp\")   # RELP module for reliable outbound communications\r\naction(type=\"omrelp\" port=\"xxx\" target=\"xx\" tls=\"on\" tls.caCert=\"xxx\" tls.myCert=\"xx\" tls.myPrivKey=\"xx\" tls.authmode=\"name\" tls.permittedpeer=[\"xxxxx\"])\r\n\r\n#### GLOBAL DIRECTIVES ####\r\n# Use default timestamp format\r\n$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat\r\n# Include all config files in /etc/rsyslog.d/\r\n$IncludeConfig /etc/rsyslog.d/*.conf\r\n#### RULES ####\r\n\r\n# Log all kernel messages to the console.\r\n# Logging much else clutters up the screen.\r\nkern.*                                                 /var/log/kernel\r\n\r\n# Log anything (except mail) of level info or higher.\r\n# Don't log private authentication messages!\r\n*.info;mail.none;authpriv.none;cron.none                /var/log/messages\r\n\r\n# The authpriv file has restricted access.\r\nauthpriv.*                                              /var/log/secure\r\n\r\n# Log all the mail messages in one place.\r\nmail.*                                                  /var/log/maillog\r\n\r\n# Log cron stuff\r\ncron.*                                                  /var/log/cron\r\n\r\n# Everybody gets emergency messages\r\n*.emerg                                                 :omusrmsg:*\r\n\r\n# Save news errors of level crit and higher in a special file.\r\nuucp,news.crit                                          /var/log/spooler\r\n\r\n# Save boot messages also to boot.log\r\nlocal7.*                                                /var/log/boot.log\r\n\r\n*.* :omrelp:xxxx:xxxxx\r\n\r\nIf you need any other information please just ask me!\r\nThanks\r\n"}}