[Pkg-openssl-devel] Bug#561558: libssl0.9.8: Some SSL connections to hang up

[Олег]

Package: libssl0.9.8
Version: 0.9.8k-7
Severity: important

In try of open some https urls in curl, connection hang up:

$ curl -v -k -I https://w3s.wmtransfer.com/
* About to connect() to w3s.wmtransfer.com port 443 (#0)
*   Trying 212.118.48.159... connected
* Connected to w3s.wmtransfer.com (212.118.48.159) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-MD5
* Server certificate:
* 	 subject: O=WebMoney Transfer; OU=WebMoney Web Service; 
CN=w3s.wmtransfer.com
* 	 start date: 2006-04-01 11:00:53 GMT
* 	 expire date: 2010-06-07 19:47:18 GMT
* 	 common name: w3s.wmtransfer.com (matched)
* 	 issuer: O=WebMoney Transfer; OU=WebMoney Certification Center; 
CN=WebMoney Transfer Root Authority
* 	 SSL certificate verify result: unable to get local issuer 
certificate (20), continuing anyway.
> HEAD / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-pc-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8k zlib/1.2.3.3 libidn/1.15 libssh2/1.2.1
> Host: w3s.wmtransfer.com
> Accept: */*
> 
* SSLv3, TLS handshake, Hello request (0):
^C

But some https urls open normally (https://launchpad.net/ for example).

-- System Information:
Debian Release: squeeze/sid
   APT prefers testing
   APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/12 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]  1.5.28            Debian configuration 
management sy
ii  libc6                  2.10.2-2          GNU C Library: Shared libraries
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library - runtime

libssl0.9.8 recommends no packages.

libssl0.9.8 suggests no packages.

-- debconf information excluded