[Pkg-openssl-devel] [maf@appgate.com: Bug#412979: encfs fails when openssl is upgraded to 0.9.8e-2]

[Eduard Bloch]

Hi guys,

any idea on what is going on there? See below.

Eduard.

----- Forwarded message from maf at appgate.com -----

Date: Thu, 1 Mar 2007 14:34:11 +0100 (CET)
From: maf at appgate.com
Subject: Bug#412979: encfs fails when openssl is upgraded to 0.9.8e-2
To: submit at bugs.debian.org

Package: encfs
Version: 1.2.5-1-1
Severity: grave
Justification: renders package unusable

Encfs stopped working after I upgraded my system today. The symptom was
that it complained "Error decoding volume key, password incorrect" even
through the password was correct. Running with the -v flag gave:

14:04:08 (main.cpp:518) Root directory: [deleted]
14:04:08 (main.cpp:519) Fuse arguments: (daemon) (threaded) encfs [deleted]
14:04:08 (Interface.cpp:165) checking if ssl/aes(2:1:1) implements ssl/blowfish(
2:1:1)
14:04:08 (Interface.cpp:165) checking if ssl/blowfish(2:1:1) implements ssl/blow
fish(2:1:1)
14:04:08 (SSL_Cipher.cpp:322) allocated cipher ssl/blowfish, keySize 20, ivlengt
h 8
EncFS Password: 
14:04:14 (FileUtils.cpp:1231) configuration key size = 32
14:04:14 (FileUtils.cpp:1232) cipher key size = 32
14:04:14 (SSL_Cipher.cpp:524) checksum mismatch: expected 403434338, got 1157830
156
14:04:14 (SSL_Cipher.cpp:525) on decode of 28 bytes
Error decoding volume key, password incorrect

Downgrading openssl to 0.9.8c-4 solved the problem.

I am not sure if this is a bug in encfs or openssl...

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.20
Locale: LANG=C, LC_CTYPE=sv_SE (charmap=ISO-8859-1)

Versions of packages encfs depends on:
ii  fuse-utils                  2.6.2-1      Filesystem in USErspace (utilities
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libfuse2                    2.6.2-1      Filesystem in USErspace library
ii  libgcc1                     1:4.1.1-21   GCC support library
ii  librlog1c2a                 1.3.7-1      flexible message logging library
ii  libssl0.9.8                 0.9.8c-4     SSL shared libraries
ii  libstdc++6                  4.1.1-21     The GNU Standard C++ Library v3

encfs recommends no packages.

-- no debconf information

----- End forwarded message -----

-- 
Der Gipfel des Ruhms ist, wenn man seinen Namen überall findet, nur
nicht im Telefonbuch.
		-- Henry Fonda