Package: libcurl3
Version: 7.13.1-2
Severity: important
Tags: patch

When libcurl3 is compiled on Debian "woody", it hangs on all SSL
connections. Here's a command to reproduce the problem:

 curl https://nexus.passport.com/

The cause seems to be a bug introduced on February by Dan Fandrich:

 http://curl.haxx.se/mail/lib-2005-03/0084.html

I applied the patch he suggested and solved the problem:

diff -u -r1.129 ssluse.c
--- lib/ssluse.c 10 Feb 2005 07:45:08 -0000 1.129
+++ lib/ssluse.c 4 Mar 2005 19:13:50 -0000
@@ -169,7 +169,7 @@
     /* let the option override the define */
     nread += RAND_load_file((data->set.ssl.random_file?
                              data->set.ssl.random_file:RANDOM_FILE),
- -1); /* -1 to read the entire file */
+ 16384);
     if(seed_enough(nread))
       return nread;
   }
@@ -231,7 +231,7 @@
   RAND_file_name(buf, BUFSIZE);
   if(buf[0]) {
     /* we got a file name to try */
- nread += RAND_load_file(buf, -1);
+ nread += RAND_load_file(buf, 16384);
     if(seed_enough(nread))
       return nread;
   } 



-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libcurl3 depends on:
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libidn11                    0.5.13-1.0   GNU libidn library, implementation
ii  libssl0.9.7                 0.9.7e-2     SSL shared libraries
ii  zlib1g                      1:1.2.2-3    compression library - runtime

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to