[Pkg-nagios-devel] Bug#900152: nsca-ng: FTBFS against openssl 1.1.1

Holger Weiß holger at zedat.fu-berlin.de
Wed Mar 20 09:31:29 GMT 2019


* Kurt Roeckx <kurt at roeckx.be> [2019-03-20 07:31]:
> On Tue, Mar 19, 2019 at 11:21:19PM +0100, Holger Weiß wrote:
> > * Kurt Roeckx <kurt at roeckx.be> [2019-03-19 22:59]:
> > > On Tue, Mar 19, 2019 at 10:28:06PM +0100, Holger Weiß wrote:
> > > > Yes, it's an OpenSSL bug.  If TLSv1.3 is used, SSL_get_psk_identity()¹
> > > > unexpectedly returns NULL.  I now avoid the function to work around the
> > > > issue.
> > > 
> > > This is documented here:
> > > https://wiki.openssl.org/index.php/TLS1.3#PSKs
> > 
> > Thanks.  I'm still using the TLSv1.2 callbacks indeed, but from reading
> > that text it's not obvious to me why SSL_get_psk_identity() would fail.
> > (Note that I'm not using identity *hints* anywhere, which is the thing
> > TLSv1.3 dropped.)  However, I can easily imagine the bug(?) being
> > related to the changes mentioned in that text.
> 
> If you think there is a bug, please file a bug on github.

Done: https://github.com/openssl/openssl/issues/8534



More information about the Pkg-nagios-devel mailing list