[Pkg-openssl-devel] Bug#680137: Bug#680137: libssl1.0.0: handshake failure (wrong cipher) since 1.0.1 (1.0.0h works)

[Kurt Roeckx]

On Tue, Jul 03, 2012 at 11:29:26PM +0200, Clement Hermann (nodens) wrote:
> Package: libssl1.0.0
> Version: 1.0.1c-3
> Severity: normal
> 
> Hi,
> 
> I've been having trouble connecting to a SSL-enabled ircd (ircd-hybrid-7.2.3nb3
> IRC server with many options, on netbsd 6.0_beta2). I use irssi, but did all my
> tests with openssl s_client to be sure.
> 
> The connexion works with libssl1.0.0h, but every later version fails with the
> error "wrong cipher". What's funny is that if I force the cipher that would
> have been chosen with 1.0.0h when using 1.0.1, I can connect.
> 
> Also, FWIW, it is working on ubuntu 12.4 (openssl 1.0.1).

Do you know what ssl implementation and version is running on the
other side?  Is there some firewall or ssl accelerator in between
or something?

I'm not sure what hybrid supports for ssl libraries, and the
Debian package doesn't seem to be build with ssl enabled.


Kurt