[Pkg-openssl-devel] Bug#1131904: libssl3t64: "LS alert, bad record mac (532)" / "decryption failed or bad record mac" since 3.6.1 on ppc64

[Sebastian Andrzej Siewior]

On 2026-03-26 08:33:57 [+0100], Philipp Klaus Krause wrote:
> Dear Maintainer,
> 
> about a week ago, I upgraded libssl3t64 on my ppc64 system to 3.6.1-3.
> This resulted in failures (see below). After downgrading to 3.6.0-2,
> the failures disappeared. An amd64 system on the same network was not
> affected (there 3.6.1 works).

…

> Architecture: ppc64
> 
> Kernel: Linux 6.19.8+deb14-powerpc64-64k (SMP w/176 CPU threads; PREEMPT)

I probably should extend this. What does
	openssl version -a

say for CPUINFO and does it work if you mask 0x10 out of it?

say
	OPENSSL_ppccap=0x2e curl $bla

?

Sebastian