[Pkg-openssl-devel] Bug#675990: openssl: renegotiation doesn't work for TLS1.1 and 1.2

[William Boughton]

Package: openssl
Version: 1.0.1c-1
Severity: important
Tags: upstream

Dear Maintainer,

This bug has been fixed up stream see:

http://marc.info/?l=openssl-dev&m=133876742108009&w=2
and
http://cvs.openssl.org/chngview?cn=22567

It can be reproduced with

openssl s_server
and s_client 

press R
the result is:

RENEGOTIATING
140543847671464:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340:


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openssl depends on:
ii  libc6        2.13-32
ii  libssl1.0.0  1.0.1c-1
ii  zlib1g       1:1.2.7.dfsg-11

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20120212

-- Configuration Files:
/etc/ssl/openssl.cnf changed [not included]

-- no debconf information