Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

[Kurt Roeckx]

On Sun, Jan 15, 2006 at 05:04:05PM +0100, Kurt Roeckx wrote:
> On Sun, Jan 15, 2006 at 04:15:53PM +0100, Sebastiaan wrote:
> > Hi,
> > 
> > this bug broke my apache2/courier-imapd-ssl/squirrelmail configuration, 
> > but I found a workaround posted somewhere in this list:
> > 
> > http://lists.andrew.cmu.edu/pipermail/jeaton-test/2005-November.txt

To quote a part from that email:
> You were right. If I change:
> no-idea no-rc5 shared
> 
> to:
> zlib no-idea no-rc5 shared
> 
> and rebuild, cyrus-imapd gives me that "bad record mac" error with the
> resulting openssl. Removing "zlib" makes it go away.

So it seem we have 2 things that conflict here.  If we have zlib,
it breaks applications, if we don't, it breaks others.


Kurt