Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#29384 - [openssl] 1.0.1 breaks ssh connectivity to some hosts, patch available

Attached to Project: Arch Linux
Opened by Tomislav Skunca (tomislav) - Tuesday, 10 April 2012, 23:21 GMT
Last edited by Pierre Schmitz (Pierre) - Wednesday, 18 April 2012, 15:46 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Pierre Schmitz (Pierre)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The new openssl breaks ssh connections to some hosts with old ssh servers.

Additional info:
The bug report http://rt.openssl.org/Ticket/Display.html?id=2775 and the fix http://cvs.openssl.org/chngview?cn=22317

Steps to reproduce:
Try to login via SSH to a Cisco router causes SSH to segfault after entering correct password.
This task depends upon

Closed by  Pierre Schmitz (Pierre)
Wednesday, 18 April 2012, 15:46 GMT
Reason for closing:  Fixed
Comment by Michel Legnered (antics) - Thursday, 12 April 2012, 08:52 GMT
Is this related? After an upgrade from openssl 1.0.0.g-1 to 1.0.1-2 I've run into an issue when connecting to the facebook graph api.

curl -I https://graph.facebook.com
curl: (35) Unknown SSL protocol error in connection to graph.facebook.com:443

https requests in node.js gives: { [Error: socket hang up] code: 'ECONNRESET' }

Downgrading the package will solve the issue for now.
Comment by Pierre Schmitz (Pierre) - Thursday, 12 April 2012, 19:39 GMT
Please check if openssl-1.0.1-3 (currently in [testing] fixes this problem)

@Michael: You problem seems not to be related. This looks more like the issue described in this thread. Might be worth to join that thread at http://marc.info/?t=133252366400006&r=1&w=2 and http://rt.openssl.org/index.html?q=2771 and addd more information about the problem if you can provide any. Let me know if upstream has a solution for this.
Comment by Tomislav Skunca (tomislav) - Wednesday, 18 April 2012, 04:00 GMT
1.0.1-3 fixes this. Thank you!

Loading...