[Pkg-openssl-devel] Bug#702635: openssl breaks postfix TLS: SSL3_GET_RECORD:decryption failed

[Graham Cobb]

Package: openssl
Version: 1.0.1e-1
Severity: important

I have just upgraded my personal mail server to the latest Wheezy.
Mail submission to postfix from some local clients has stopped working.

The entry in the mail log is:

postfix/smtpd[6543]: warning: TLS library problem: 6543:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:s3_pkt.c:484

I am reporting this against openssl because a search indicates it is likely
an openssl problem, in particular the bug fixed by a recent fix: 
http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=32cc247

However, I have not verified that this fix does fix the problem.


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro (charmap=ISO-8859-15) (ignored: LC_ALL set to en_IE at euro)
Shell: /bin/sh linked to /bin/bash

Versions of packages openssl depends on:
ii  libc6        2.13-38
ii  libssl1.0.0  1.0.1e-1
ii  zlib1g       1:1.2.7.dfsg-13

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20130119

-- no debconf information