[Pkg-openssl-devel] Bug#573889: libssl0.9.8: unknown message digest algorithm error in dovecot

[Marcus Jodorf]

Package: libssl0.9.8
Version: 0.9.8m-2
Severity: important

This seems to be related to bug #573748 which was reassigned from libssl0.9.8 to postfix.

I ran into similar problems with my dovecot (1.2.10-1) installation.
After upgrading to libssl0.9.8m-2 I'm unable to connect to my dovecot server (which uses a self-signed certificate) using tls/ssl connections.

from the logs:

Mar 14 19:01:01 hydrogen dovecot: auth(default): new auth connection: pid=6599
Mar 14 19:01:01 hydrogen dovecot: imap-login: Disconnected (no auth attempts): rip=91.53.xxx.yyy, lip=79.140.xxx.yyy, TLS handshaking: SSL_accept() failed: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm

Reverting back to libssl0.9.8_0.9.8k-8_i386.deb (and not upgrading to the newest dovecot packages which depend on libssl0.9.8 >=0.9.8m-1 and therefore show the bug) solves this problem for me.



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.33 (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libssl0.9.8 depends on:
ii  debconf [debconf-2.0]   1.5.28           Debian configuration management sy
ii  libc6                   2.10.2-6         Embedded GNU C Library: Shared lib
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

libssl0.9.8 recommends no packages.

libssl0.9.8 suggests no packages.

-- debconf information excluded