A NOTE has been added to this issue. ====================================================================== https://www.opencsw.org/mantis/view.php?id=5098 ====================================================================== Reported By: soladmin Assigned To: dam ====================================================================== Project: curl Issue ID: 5098 Category: regular use Reproducibility: always Severity: major Priority: normal Status: confirmed ====================================================================== Date Submitted: 2013-08-02 21:39 CEST Last Modified: 2013-08-07 20:56 CEST ====================================================================== Summary: curl fails to connect to any site over SSL Description: Solaris 10 using opencsw's kiel repository. Curl always fails when connecting to any system using SSL.
# curl -v https://google.com/ * About to connect() to google.com port 443 (https://www.opencsw.org/mantis/view.php?id=0) * Trying 173.194.46.32... * connected * Connected to google.com (173.194.46.32) port 443 (https://www.opencsw.org/mantis/view.php?id=0) * successfully set certificate verify locations: * CAfile: none CApath: /opt/csw/ssl/certs * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS alert, Server hello (2): * error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState failed * Closing connection https://www.opencsw.org/mantis/view.php?id=0 curl: (35) error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState failed ====================================================================== ---------------------------------------------------------------------- (0010516) yann (developer) - 2013-08-07 20:56 https://www.opencsw.org/mantis/view.php?id=5098#c10516 ---------------------------------------------------------------------- I tracked the origin of the problem in the patch applied to enable the pkcs11 engine. I don't know exactly why it causes some failures and it will takes some time to find out, so I will release shortly a new version of the openssl package with pkcs11 engine disabled under sparc. I'll keep you updated. Yann _______________________________________________ bug-notifications mailing list bug-notifications@lists.opencsw.org https://lists.opencsw.org/mailman/listinfo/bug-notifications