Further investigation suggests that the issue is with optimization of s3_pkt.c . build the library by keeping O3 optimization for all .c file and no optimization for s3_pkt.c , the handshake was successful .... it now means that there is some issue in s3_pkt.c code which fails because of optimization on HP-UX 11 23 IA64 platform.
Thanks Anil On Tue, May 26, 2009 at 5:35 PM, Anil Tambe <tambe.a...@gmail.com> wrote: > More investigation shows that the issue is seen with ssl3 and tls1 , ssl2 > works fine ... > > ../util/shlib_wrap.sh ./ssltest -ssl2 Available compression methods: NONE > SSLv2, cipher SSLv2 DES-CBC3-MD5, 512 bit RSA 1 handshakes of 256 bytes done > > ../util/shlib_wrap.sh ./ssltest -ssl3 Available compression methods: NONE > ERROR in SERVER 14472:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl > handshake failure:s3_pkt.c:845: SSLv3, cipher (NONE) (NONE) 1 handshakes of > 256 bytes done > ../util/shlib_wrap.sh ./ssltest -tls1 Available compression > methods: NONE ERROR in SERVER 14480:error:140940E5:SSL > routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:845: TLSv1, cipher > (NONE) (NONE) 1 handshakes of 256 bytes done Thanks Anil > > > On Tue, May 26, 2009 at 4:11 PM, Anil Tambe <tambe.a...@gmail.com> wrote: > >> >> hi, >> >> Openssl Veriosn :: openssl 0.9.8g >> Platform :: HP-UX 11 23 IA64 >> >> SSL Handshake fails with Release variants , works fine with the Debug >> variants. Any Comments ? Can this be related to optimization ? Any thoughts >> why it works for Debug and fails with release ? >> >> #### Handshake fails with Release variants .. >> > ./ssltest -v -d >> Available compression methods: >> NONE >> client waiting in SSL_connect - before/connect initialization >> server waiting in SSL_accept - before/accept initialization >> ERROR in SERVER >> 6698:error:140780E5:SSL routines:SSL23_READ:ssl handshake >> failure:s23_lib.c:142: >> 1 handshakes of 256 bytes done >> >> #### Handshake Succeeds with Debug variants .. >> > ./ssltest -d >> Available compression methods: >> NONE >> client waiting in SSL_connect - before/connect initialization >> server waiting in SSL_accept - before/accept initialization >> client waiting in SSL_connect - SSLv2/v3 read server hello A >> server waiting in SSL_accept - SSLv3 read client certificate A >> client waiting in SSL_connect - SSLv3 read finished A >> client wrote 256 >> server read 256 >> server wrote 256 >> client read 256 >> TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 512 bit RSA >> 1 handshakes of 256 bytes done >> >> >> >> Thanks >> Anil >> > >
