[Pkg-openssl-devel] Bug#678353: Bug#678353: openssl: Similar error here; upstream report available

[Kurt Roeckx]

On Wed, Feb 27, 2013 at 09:34:33AM +0100, Benjamin Eikel wrote:
> > > Yes, it is. I used the following command:
> > > openssl s_client -connect mail.uni-paderborn.de:465
> > 
> > That works for me ...
> 
> the connection works for me, too. It dies when issuing the first command (e.g. 
> EHLO test). Does the additional command work for you, too?

Yes, I get a reply back:
250-mail.uni-paderborn.de Hello d51a5255d.access.telenet.be [81.165.37.93]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN GSSAPI
250 HELP

That is with libssl1.0.0:amd64 1.0.1e-1

> Do you test on a machine with AES-NI support?

Yes.  cpuinfo says:
model name      : Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid 

cpuid in openssl should automaticly pick up the "aes" part and use
aes-ni.

> The output is attached to this mail. Can I somehow produce more debugging 
> output? /usr/bin/openssl is built without debugging symbols as far as I can 
> see, so gdb does not work out of the box (libssl1.0.0-dbg is installed).

If you install libssl1.0.0-dbg you should get debug info for the
libraries, where the error happens.


Kurt