[Pkg-openssl-devel] Bug#793565: libssl1.0.0: HMAC broken after upgrade to 1.0.2d-1

[Marc Lehmann]

Package: libssl1.0.0
Version: 1.0.2d-1
Severity: normal

[This is a re-sent, as the debian mailserver accepted the original
reportbug mail, but it never showed up, so I assume it was lost. Apologies
if it turns out to be a duplicate].

Dear Maintainer,

upgrading libssl1.0.0 from 1.0.1k-3+deb8u1 to 1.0.2d-1 breaks HMAC
authentication in a gvpe compiled with 1.0.1k-3. This is probably related
to #788511, but the problem occurs with the supposedly fixed version.

Downgrading libssl to 1.0.1k-3+deb8u1 (and nothing else) makes connections
work again.

Since the ABI was apparently broken before (#788511), chances are high
that the fix in 1.0.2d-1 isn't effective and 1.0.2d-1 is still ABI
incompatible to the version in jessie.

-- System Information:
Debian Release: 8.1
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18.14-031814-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libssl1.0.0 depends on:
ii  debconf [debconf-2.0]  1.5.56
ii  libc6                  2.19-18
ii  multiarch-support      2.19-18

libssl1.0.0 recommends no packages.

libssl1.0.0 suggests no packages.

-- debconf information excluded