Re[2]: Renegotiation workaround for TLS 1.2, 1.1 patch doesn't work (Check-in [22565])

2014-09-02 Thread Artem Pylypchuk
5 Of course, the error messages themselves can be removed by choosing suitable methods and flags (all working combinations listed in original message). Did I pick the wrong list to report this? Cheers. 02.09.2014 23:13, Viktor Dukhovni >On Tue, Sep 02, 2014 at 10:52:59PM +0300, Artem Pylypch

Re[2]: Renegotiation workaround for TLS 1.2, 1.1 patch doesn't work (Check-in [22565])

2014-09-02 Thread Artem Pylypchuk
Yes, the "stuck connection" bug I mentioned is the "F5 BigIP needs padding bug" or is very similar to it. Sorry for the confusing explanation. -- реклама --- Крутые телефоны! Низкие цены! Покупай тут! http://aukro.ua/?utm_source=i.ua&utm_med

Re: openssl-1.0.2-beta2

2014-09-02 Thread Artem Pylypchuk
If you're building Curl from source, try ./configure --prefix=/usr --with-ssl=../openssl-1.0.2 This configuration trick applies to any version of openssl or any other library in general. To run your Curl from source directory, set the LD_LIBRARY_PATH or LD_PRELOAD environment variable to point

Re[2]: Renegotiation workaround for TLS 1.2, 1.1 patch doesn't work (Check-in [22565])

2014-09-02 Thread Artem Pylypchuk
ounds into open >source? Is there some other vulnerability that you're trying to avoid, or is >it a strict compatibility issue? If it's strictly for proprietary >compatibility, then you need to get the proprietary vendor to fix its code for >compatibility. > >

Renegotiation workaround for TLS 1.2, 1.1 patch doesn't work (Check-in [22565])

2014-09-02 Thread Artem Pylypchuk
Hello! The patch http://cvs.openssl.org/chngview?cn=22565 does not fix the following error messages at write and session re-negotiation, for TLS_v1_1_client_method: OpenSSL error 1: error:0001:lib(0):func(0):reason(1) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number My si