​Dear experts,

after I updated the libssl1.1 package from the official Ubuntu 18.04 
repository, iPXE is unable to connect to the Apache webserver over SSL.

The error messages:ipxe: TLS 0x33444 received overlength Handshake
ipxe: Download of "default.ipxe" failed: Invalid argument 
(http://ipxe.org/1c0de802)


iPXE is compiled with the following command:
make DEBUG=tls,x509,ocsp bin/undionly.kpxe TRUST=certs.pem


libssl1.1 package information (dpkg -s libssl1.1):
Package: libssl1.1
Status: install ok installed
Priority: important
Section: libs
Installed-Size: 3914
Maintainer: Ubuntu Developers <[email protected]>
Architecture: amd64
Multi-Arch: same
Source: openssl
Version: 1.1.1-1ubuntu2.1~18.04.1
Depends: libc6 (>= 2.25), debconf (>= 0.5) | debconf-2.0
Breaks: isync (<= 1.3.0-1build1), python-boto (<= 2.44.0-1ubuntu2), 
python-httplib2 (<= 0.9.2+dfsg-1), python-imaplib2 (<= 2.57-1), python3-boto 
(<= 2.44.0-1ubuntu2), python3-imaplib2 (<= 2.57-1)
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Homepage: https://www.openssl.org/
Original-Maintainer: Debian OpenSSL Team 
<[email protected]>




As a temporary workaround we did a rollback to the older version:
Package: libssl1.1
Status: install ok installed
Priority: important
Section: libs
Installed-Size: 3412
Maintainer: Ubuntu Developers <[email protected]>
Architecture: amd64
Multi-Arch: same
Source: openssl
Version: 1.1.0g-2ubuntu4.3
Depends: libc6 (>= 2.14), debconf (>= 0.5) | debconf-2.0
Breaks: salt-common (<= 2016.3.3+ds-3)
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Homepage: https://www.openssl.org/
Original-Maintainer: Debian OpenSSL Team 
<[email protected]>




Do you have any suggestions so far?




Kind regards,
Patrick






_______________________________________________
ipxe-devel mailing list
[email protected]
https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel

Reply via email to