Hi Alessandro, the upstream patch (also included in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852317#5 ) applies to the debian package, and fixes the issue.
AFAIK today is the last day to upload a fixed version without an exception granted by the release team. I'll attach the patch formatted for inclusion in debian/patches/, so it should cause little effort to upload a fixed package. Jan
Description: Fix hanging connections when trying to fetch SSL URLs using the multi_socket API Origin: vendor Bug-Debian: https://bugs.debian.org/852317 Forwarded: not-needed Author: Daniel Stenberg <dan...@haxx.se> Last-Update: 2017-01-23 --- a/lib/vtls/vtls.c +++ b/lib/vtls/vtls.c @@ -484,7 +484,7 @@ void Curl_ssl_close_all(struct Curl_easy *data) curlssl_close_all(data); } -#if defined(USE_SSLEAY) || defined(USE_GNUTLS) || defined(USE_SCHANNEL) || \ +#if defined(USE_OPENSSL) || defined(USE_GNUTLS) || defined(USE_SCHANNEL) || \ defined(USE_DARWINSSL) || defined(USE_NSS) /* This function is for OpenSSL, GnuTLS, darwinssl, and schannel only. */ int Curl_ssl_getsock(struct connectdata *conn, curl_socket_t *socks, @@ -518,7 +518,7 @@ int Curl_ssl_getsock(struct connectdata *conn, (void)numsocks; return GETSOCK_BLANK; } -/* USE_SSLEAY || USE_GNUTLS || USE_SCHANNEL || USE_DARWINSSL || USE_NSS */ +/* USE_OPENSSL || USE_GNUTLS || USE_SCHANNEL || USE_DARWINSSL || USE_NSS */ #endif void Curl_ssl_close(struct connectdata *conn, int sockindex)
