Subject: cgi script with "SSLOptions +StdEnvVars" fails

From: Moeller Wolf-Dietrich <[email-masked]>
Date: Tue, 25 Jun 2002 16:07:34 +0200

Executing scripts on my Apache2 leads to the following error log lines
(example):
  [Tue Jun 25 15:13:07 2002] [error] [client 127.0.0.1] (22)Invalid
argument: couldn't create child process: 22: E:/Web/cgi-bin/test.pl
  [Tue Jun 25 15:13:07 2002] [error] [client 127.0.0.1] (22)Invalid
argument: couldn't spawn child process: E:/Web/cgi-bin/test.pl

If I remove the "SSLOptions +StdEnvVars" from ssl.conf, all scripts work
fine. (Executing scripts on any other virtual host without ssl also works
fine).
Does anyone have a clue? or is it a mod_ssl bug?
-------------------------
System: WinNT 4.0 SP6a, Apache installed from
"Apache-2.0.39-Mod_SSL-OpenSSL-0.9.6d-Win32.zip" from
"http://www.modssl.org/contrib/"

httpd.conf (snippet) and ssl.conf:
-------------------------
ScriptAlias /cgi-bin/ "E:/Web/cgi-bin/"
<Directory "E:/Web/cgi-bin">
    AllowOverride Limit
    Order allow,deny
    Allow from all
</Directory>
-------------------------
Listen 443
NameVirtualHost *:443
SSLSessionCache         dbm:logs/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex sem
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<VirtualHost _default_:443>
    ServerName localhost
    SSLEngine on
    SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile conf/ssl/server.cert
    SSLCertificateKeyFile conf/ssl/server.key
    <Directory "E:/Web/cgi-bin">
        AllowOverride Limit
        SSLOptions +StdEnvVars
    </Directory>
    SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
</VirtualHost>                                  
-------------------------

----------------------------------------
Dr. Wolf-Dietrich Moeller
Siemens AG, CT IC 3, D-81730 München
Corporate Technology Department Security
Mch P, Tel. +49 89 636-53391, Fax -48000
[email-masked]
Intranet https://security.ct.siemens.de/
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email-masked]
Automated List Manager                            [email-masked]