[Pkg-openssl-devel] libssl1.0.0 changelog and StartTLS borken...

Woody woody at suwalski.net
Wed Jul 1 18:22:44 UTC 2015


The changelog for openssl, libssl and related is missing. See:

http://ftp-master.metadata.debian.org/changelogs//main/o/openssl/openssl_1.0.1k-3+deb8u1_changelog

I have a problem with the StartTLS after upgrading to the 1.0.0k version.
The phones (Android, Blackberry) trying to send SMTP email using 
StartTLS authentication fail:

2015-07-01 06:56:15 TLS error on connection from dankaq5.suwalski.net 
([127.0.0.1]) [120.7.1.74] (via inetd) (recv): A TLS packet with 
unexpected length was received.
2015-07-01 06:56:15 TLS error on connection from dankaq5.suwalski.net 
([127.0.0.1]) [120.7.1.74] (via inetd) (send): The specified session has 
been invalidated for some reason.

After restoring the backup from May, it is working for me again with old 
versions of SSL:
suwnet:/home/woody> dpkg -l | grep ssl
ii  libcrypt-openssl-bignum-perl 0.04-3                         
i386         Access OpenSSL multiprecision integer arithmetic libraries
ii  libcrypt-openssl-rsa-perl 0.28-1                         
i386         module for RSA encryption using OpenSSL
ii  libcrypt-ssleay-perl 0.58-1                         i386         
OpenSSL support for LWP
ii  libgnutls-openssl27:i386 2.12.20-8+deb7u3               i386         
GNU TLS library - OpenSSL wrapper
ii  libio-socket-ssl-perl 1.76-2                         all          
Perl module implementing object oriented interface to SSL sockets
ii  libnet-ssleay-perl 1.48-1+b1                      i386         Perl 
module for Secure Sockets Layer (SSL)
ii  libssl-dev 1.0.1e-2+deb7u16               i386         SSL 
development libraries, header files and documentation
ii  libssl0.9.8 0.9.8o-4squeeze14              i386         SSL shared 
libraries
ii  libssl1.0.0:i386 1.0.1e-2+deb7u16               i386         SSL 
shared libraries
ii  openssl 1.0.1e-2+deb7u16               i386         Secure Socket 
Layer (SSL) binary and related cryptographic tools
ii  ssl-cert 1.0.32                         all          simple debconf 
wrapper for OpenSSL

Will there be a fixup patch released sometime for this issue?

I have found somewhere else references for an LDAP showing similar 
symptoms - it was established that the issue was the incompatibility 
between openssl and gnutls.

Are you aware of similar problems with exim4?

Or is it some other package breaking things and I am blaming openssl by 
mistake :-(

Thanks, Woody





More information about the Pkg-openssl-devel mailing list