[Pkg-openssl-devel] Bug#573748: libssl0.9.8: unknown message digest algorithm error in postfix

[Richard van den Berg]

Package: libssl0.9.8
Version: 0.9.8m-2
Severity: important

With this version I am not longer able to use my self signed signatures in
postfix. The error that is reported in mail.log is:

Mar 13 15:42:59 majoron postfix/smtpd[14710]: SSL_accept error from xxx.cable.ziggo.nl[94.209.xxx.yyy]: -1
Mar 13 15:42:59 majoron postfix/smtpd[14710]: warning: TLS library problem: 14710:error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm:a_verify.c:146:

I can reporduce the error with

$ openssl s_client -connect vdberg.org:26 -CAfile /etc/ssl/certs/vdberg.org.ca.pem -starttls smtp
CONNECTED(00000003)
5657:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
failure:s23_lib.c:188:

This looks a lot like #541735 which was fixed in 0.9.8k-5

Reverting back to libssl0.9.8_0.9.8k-7_amd64.deb solved this issue for me.

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (990, 'stable'), (400, 'testing'), (300, 'experimental'), (300, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.33-Soleus64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]   1.5.24           Debian configuration management sy
ii  libc6                   2.10.2-6         Embedded GNU C Library: Shared lib
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

libssl0.9.8 recommends no packages.

libssl0.9.8 suggests no packages.

-- debconf information excluded