Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

2006-01-15 Thread Kurt Roeckx
On Sun, Jan 15, 2006 at 04:15:53PM +0100, Sebastiaan wrote: Hi, this bug broke my apache2/courier-imapd-ssl/squirrelmail configuration, but I found a workaround posted somewhere in this list: http://lists.andrew.cmu.edu/pipermail/jeaton-test/2005-November.txt I used

Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

2006-01-15 Thread Kurt Roeckx
On Sun, Jan 15, 2006 at 05:04:05PM +0100, Kurt Roeckx wrote: On Sun, Jan 15, 2006 at 04:15:53PM +0100, Sebastiaan wrote: Hi, this bug broke my apache2/courier-imapd-ssl/squirrelmail configuration, but I found a workaround posted somewhere in this list:

Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

2006-01-15 Thread Kurt Roeckx
On Sun, Jan 15, 2006 at 05:15:20PM +0100, Kurt Roeckx wrote: To quote a part from that email: You were right. If I change: no-idea no-rc5 shared to: zlib no-idea no-rc5 shared and rebuild, cyrus-imapd gives me that bad record mac error with the resulting openssl. Removing zlib

Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

2006-01-15 Thread Steve Langasek
On Sun, Jan 15, 2006 at 10:38:16PM +0100, Kurt Roeckx wrote: On Sun, Jan 15, 2006 at 05:15:20PM +0100, Kurt Roeckx wrote: To quote a part from that email: You were right. If I change: no-idea no-rc5 shared to: zlib no-idea no-rc5 shared and rebuild, cyrus-imapd gives me that

Bug#338006: [Pkg-openssl-devel] Bug#338006: libssl0.9.8: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling - possible workaround

2006-01-15 Thread Kurt Roeckx
On Sun, Jan 15, 2006 at 04:03:33PM -0800, Steve Langasek wrote: I should correct myself. We have 3 options for zlib: - no-zlib - zlib - zlib-dynamic Package breaks if we use zlib-dynamic and zlib1-dev is not installed, which is why we used zlib instead. Fix zlib-dynamic to use