[Net-ssleay-devel] IO::Socket::SSL failures caused by Net::SSLeay linked against openssl 0.9.8

[Mike McCauley]

Hi Florian,

On Thursday 01 December 2005 09:50, Florian Ragwitz wrote:
> On Thu, Dec 01, 2005 at 08:59:59AM +1000, Mike McCauley wrote:
> > Hello Florian,
> >
> > On Thursday 01 December 2005 01:13, Florian Ragwitz wrote:
> > > On Wed, Nov 30, 2005 at 11:54:09PM +1000, Mike McCauley wrote:
> > > > Hello Florian,
> > > >
> > > > On Wednesday 30 November 2005 23:22, Florian Ragwitz wrote:
> > > > > Hello,
> > > > >
> > > > > I'm the Debian maintainer of both IO::Socket::SSL and Net::SSLeay.
> > > > > I recently did a new upload of Net::SSLeay that was the first
> > > > > version compiled against the latest libssl version in Debian,
> > > > > 0.9.8a.
> > > > >
> > > > > With net-ssleay compiled against 098a the io-socket-ssl test suite
> > > > > fails with these errors: http://nopaste.debianforum.de/1709
> > > > >
> > > > > RT ticket #14176 also describes this issue.
> > > >
> > > > whats that RT ticket thing? where can I find it?
> > >
> > > See http://rt.cpan.org/NoAuth/Bugs.html?Dist=IO-Socket-SSL
> >
> > interesting error in that report:
> >
> > 1..9
> > ok
> > SSL connect attempt failederror:140943FC:SSL
> > routines:SSL3_READ_BYTES:sslv3 alert bad
> > record mac
> >  at blib/lib/IO/Socket/SSL.pm line 458
> >         IO::Socket::SSL::error('MyClass=GLOB(0x81efe5c)', 'SSL connect
> > attempt failed') called at blib/lib/IO/Socket/SSL.pm line 131
> >         IO::Socket::SSL::connect_SSL('MyClass=GLOB(0x81efe5c)',
> > 'MyClass=GLOB(0x81efe5c)') called at blib/lib/IO/Socket/SSL.pm line 374
> >         IO::Socket::SSL::start_SSL('MyClass', 'MyClass=GLOB(0x81efe5c)')
> > called at
> > t/compatibility.t line 45
> >
> > I have seen similar errors start to occur when people have used the
> > 0.9.8a prebuilt Windows binary openssl from shining light production
> >
> > Tests here on Mandrake with openssl 0.9.8a are fine :-(
> > I will try some other platforms later today.
>
> Interesting would be Debian GNU/Linux as that's the platform I have
> problems with and at least two persons can reproduce it.

Hmmm, tested OK here with

Debian 3.1r0a
perl, v5.8.4 part of default deb install
openssl 0.9.8a compiled locally with all defaults
Net_SSLeay 1.25 compiled locally with all defaults
IO-Socket-SSL 0.97 compiled locally with all defaults:

mikem at valerie:~/IO-Socket-SSL-0.97$ make test
cp SSL.pm blib/lib/IO/Socket/SSL.pm
PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" 
"test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/01loadmodule.....ok
t/02settings.......ok
t/compatibility....ok
t/core.............ok
t/sessions.........skipped
        all skipped: Net::SSLeay version less than 1.26
All tests successful, 1 test skipped.
Files=5, Tests=67,  1 wallclock secs ( 0.90 cusr +  0.10 csys =  1.00 CPU)


>
> Maybe it would be good to know what's the difference between mandrakes
> and debians libssl.
>
>
> -Flo

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS, NetWare etc.