Hi,

I was running some tests from ssllabs.com and ran into a segfault.

I used the "CurveBall" manual test link from this page:
https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html

Which points to: https://www.ssllabs.com:10446/

Nav_open_url: new url='https://www.ssllabs.com:10446/'
Connecting to 69.67.183.100:10446
www.ssllabs.com:10446: TLSv1.2, cipher ECDHE-ECDSA-AES256-GCM-SHA384
ecdsa-with-SHA256 384-bit EC: /C=US/ST=California/L=Foster City/O=Qualys, 
Inc./OU=SSLLabs CurveBall Leaf/CN=www.ssllabs.com
ecdsa-with-SHA256 
Program received signal SIGSEGV, Segmentation fault.
_lcry_EVP_PKEY_id (pkey=0x0) at /usr/src/lib/libcrypto/evp/p_lib.c:793
793                return pkey->type;
(gdb) bt
#0  _lcry_EVP_PKEY_id (pkey=0x0) at /usr/src/lib/libcrypto/evp/p_lib.c:793
#1  0x000001f9ee7da2b0 in Tls_check_cert_strength (ssl=<optimized out>, 
    srv=<optimized out>, choice=0x6faff21f66f8) at tls_openssl.c:526
#2  0x000001f9ee7d8fd3 in Tls_examine_certificate (ssl=0x1fca8ddac80, 
srv=0x1fc1b4056a0)
    at tls_openssl.c:865
#3  Tls_connect (fd=7, connkey=4) at tls_openssl.c:1208
#4  0x000001fce9a7a7f0 in fl_wait(double) () from /usr/local/lib/libfltk.so.9.0
#5  0x000001fce9a0777f in Fl::wait(double) () from /usr/local/lib/libfltk.so.9.0
#6  0x000001fce9a079a1 in Fl::wait() () from /usr/local/lib/libfltk.so.9.0
#7  0x000001f9ee77e774 in main (argc=1, argv=0x6faff21f6a48) at dillo.cc:621

When I try to open it with curl, this is the result:
curl: (35) TLS connect error: error:10FFF010:elliptic curve 
routines:CRYPTO_internal:EC lib

This is on OpenBSD, using LibreSSL.

I did a curl test on a Linux box and didn't get that error, so it may
be LibreSSL specific.

Happy to do further testing if you have any ideas.

Regards,
Alex

_______________________________________________
Dillo-dev mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to