Control: retitle -1 dovecot-imapd: segfaults on incoming ssl3 connections

On Wed, Dec 10, 2014 at 07:02:13PM -0500, Jaldhar H. Vyas wrote:

> >This happens at every login attempt, and also with dovecot and libssl1.0.0
> >from sid and from experimental.
> So far we haven't received any similar reports and I am unable to reproduce
> it myself.  So I suspect this might be a local problem at your end.  But
> I'll keep this bug open in case someone else steps forward.

I managed to put my hand on the evolution that was triggering this: it
stopped triggering a segfault when I switched it from SSL to TLS. Any
connection method over SSL would trigger the segfault, switching to TLS
made everything work.

So I tried opening a SSL3 connection to dovecot with openssl; I had to
get an old version from 
http://snapshot.debian.org/package/openssl/1.0.1e-2%2Bdeb7u7
so that the -ssl3 switch would work.

Issuing this command makes dovecot segfault reliably on my jessie server:

  openssl s_client -ssl3 -connect my-server-name:993

This instead works:

  openssl s_client -connect my-server-name:993


Enrico

-- 
GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <[email protected]>

Attachment: signature.asc
Description: Digital signature

Reply via email to