[Pkg-openssl-devel] Bug#678353: Bug#678353: openssl: Similar error here; upstream report available

[Kurt Roeckx]

On Tue, Feb 26, 2013 at 09:14:59AM +0100, Benjamin Eikel wrote:
> Hello,
> 
> Am Montag, 25. Februar 2013, 18:35:18 schrieb Kurt Roeckx:
> > On Mon, Feb 25, 2013 at 05:31:41PM +0100, Benjamin Eikel wrote:
> > > Package: openssl
> > > Version: 1.0.1e-1
> > > Followup-For: Bug #678353
> > > 
> > > Hello,
> > > 
> > > I suffer from a similar problem. When I use openssl s_client (for example
> > > to connect to a mail server), the connection dies with the following
> > > error message after issuing the first command:
> > > 140551174117032:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption
> > > failed or bad record mac:s3_pkt.c:484:
> > > 
> > > I am quite sure that this is related to the upstream discussion at
> > > http://www.mail-archive.com/openssl-dev@openssl.org/msg32009.html
> > 
> > That issue only affected 1.0.1d which was never uploaded to
> > Debian.  I've waited for the 1.0.1e version because of that.
> 
> shall I open a new bug report?

Do you want to report it with upstream?  Just send a mail to
rt at openssl.org


> > > It seem to occur only on machines with AES-NI support (which my machine
> > > is).
> > 
> > I'm not seeing any issues, and I have aesni support myself.
> > 
> > Is this a public mail server we can connect to, to try and debug?
> 
> Yes, it is. I used the following command:
> openssl s_client -connect mail.uni-paderborn.de:465

That works for me ...


Kurt