[Pkg-openssl-devel] Bug#702635: Bug#702635: openssl breaks postfix TLS: SSL3_GET_RECORD:decryption failed

[Kurt Roeckx]

On Sat, Mar 09, 2013 at 12:06:15PM +0000, Graham Cobb wrote:
> Package: openssl
> Version: 1.0.1e-1
> Severity: important
> 
> I have just upgraded my personal mail server to the latest Wheezy.
> Mail submission to postfix from some local clients has stopped working.
> 
> The entry in the mail log is:
> 
> postfix/smtpd[6543]: warning: TLS library problem: 6543:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac:s3_pkt.c:484

This is problem the same problem as various other people have
reported already.  My guess is that it goes away when
you do:
export OPENSSL_ia32cap=~0x200000000000000

Can you show the content of /proc/cpuinfo?

> I am reporting this against openssl because a search indicates it is likely
> an openssl problem, in particular the bug fixed by a recent fix: 
> http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=32cc247

The version you're reporting this against has that commit in it.


Kurt