[Pkg-openssl-devel] Bug#706423: Bug#706423: openssl: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337:

[Kurt Roeckx]

On Tue, Jun 11, 2013 at 10:05:30PM -0400, Gedalya wrote:
> The discussion here[1] seems to be misguided. Of course it's nice
> for every app to expose openssl options in its config, but openssl
> is what is broken here.

I'm pretty sure that the other side is broken, it's just that
openssl is exposing the problems on the other side.  Maybe
we can work around it, but in that case I need more info.

> As for blaming the remote side - GnuTLS apps in wheezy are able to
> talk to MS Exchange (same exact servers having this error with
> postfix) with no specific configuration changes, having TLSv1.2
> still enabled (e.g. exim).

This is new for me.  In all recent cases I've seen gnutls had
the same problem talking to servers as openssl has.  So if this
is a server I can access over the internet, can you give more
details?


Kurt