[Pkg-openssl-devel] Bug#702635: Bug#702635: openssl breaks postfix TLS: SSL3_GET_RECORD:decryption failed

[Graham Cobb]

On Saturday 09 March 2013 12:27:29 Kurt Roeckx wrote:
> This is problem the same problem as various other people have
> reported already.  My guess is that it goes away when
> you do:
> export OPENSSL_ia32cap=~0x200000000000000

Yes

> Can you show the content of /proc/cpuinfo?

It is 4 times this (for the 4 cores, processor 0, 1, 2, 3 -- let me know if 
you need the whole thing)...

processor       : 0
vendor_id       : AuthenticAMD
cpu family      : 21
model           : 1
model name      : AMD FX(tm)-4100 Quad-Core Processor            
stepping        : 2
microcode       : 0x6000605
cpu MHz         : 3600.000
cache size      : 2048 KB
physical id     : 0
siblings        : 4
core id         : 0
cpu cores       : 2
apicid          : 16
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca 
cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb 
rdtscp lm constant_tsc rep_good nopl nonstop_tsc extd_apicid aperfmperf pni 
pclmulqdq monitor ssse3 cx16 sse4_1 sse4_2 popcnt aes xsave avx lahf_lm 
cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs 
xop skinit wdt lwp fma4 nodeid_msr topoext perfctr_core arat cpb hw_pstate npt 
lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists 
pausefilter pfthreshold
bogomips        : 7224.11
TLB size        : 1536 4K pages
clflush size    : 64
cache_alignment : 64
address sizes   : 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate [9]

> > I am reporting this against openssl because a search indicates it is
> > likely an openssl problem, in particular the bug fixed by a recent fix:
> > http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=32cc247
> 
> The version you're reporting this against has that commit in it.

OK.  With reference to your other reply, note that I can reproduce this.  Let 
me know if there is more info I can supply.