[
https://issues.apache.org/jira/browse/TS-3424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Susan Hinrichs updated TS-3424:
-------------------------------
Attachment: ts-3424-2.diff
Attaching a slightly different fix in ts-3424-2.diff which I think should be
better.
I was actually able to exercise this fix in my test environment. My convoluted
bank site triggered the problem case. With this fix, the page loaded
successfully. Without the fix, my FF browser shows
"An error occurred during a connection to www.buseyil.com. SSL peer reports
incorrect Message Authentication Code. (Error code: ssl_error_bad_mac_alert) "
I was sitting in the debugger. I think I wasn't noticing the problem earlier
because the browser would just retry the connection.
I'm surprised this isn't happening more often.
> SSL error: SSL3_GET_RECORD:decryption failed or bad record mac
> --------------------------------------------------------------
>
> Key: TS-3424
> URL: https://issues.apache.org/jira/browse/TS-3424
> Project: Traffic Server
> Issue Type: Bug
> Components: Core, SSL
> Reporter: Brian Geffon
> Assignee: Brian Geffon
> Fix For: 5.3.0
>
> Attachments: ts-3424-2.diff, ts-3424.diff
>
>
> Starting with 5.2.x we're seeing SSL_ERROR_SSL type errors in
> {{ssl_read_from_net}}, when calling OpenSSL's {{ERR_error_string_n}} we see
> the error is {{1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad
> record mac}}.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
