[Pkg-openssl-devel] Bug#912737: openssl: SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed

[Julien Lecomte]

Package: openssl
Version: 1.1.1-2
Severity: serious
Justification: makes unrelated software on the system (or the whole system) break

Dear Maintainer,

On a fresh install of Debian/Buster via the alpha3 dvd ISO, when I try to access some SSL URLs, openssl fails to download said resource.

~~~bash
julien at desktop:/tmp$ curl  https://download.lenovo.com/pccbbs/mobiles/n1wuj23w.exe --output file
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0 8169k    0 27800    0     0   268k      0  0:00:30 --:--:--  0:00:30  268k
curl: (56) OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0
~~~

URL above issues error "/tmp/mozilla_julien0/5wQP3KKa.bin.part could not be saved, because the source file could not be read." under firefox-esr.

/etc/ssl/openssl.cnf is pristine (md5sum: 30432a49dc82df6e74619ca2b8506c8a)

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssl depends on:
ii  libc6      2.27-8
ii  libssl1.1  1.1.1-2

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20170717

-- no debconf information