Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-15 Thread Michael Smith
Hi Kyle,I rebuilt with zlib 1.2.3, as I was previously using 1.1.3 - but no change.  I also tried compiling openssl with -no-zlibI also triedSSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSAandSSLCipherSuite SSLv3:-LOW:-EXPORT:RC4+RSA with no successCan you make other suggestions as to things I might try?T

Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-09 Thread Michael Smith
Thanks,I did a build with openssl-0.9.8-stable-SNAP-20060209 and the no-zlib option.  I still find the same problem.I'll investigate some of the other suggestions now.Michael  On 2/8/06, Kyle Hamilton <[EMAIL PROTECTED]> wrote: Dr. Henson:May I direct your attention to the thread entitled "RE: [ope

Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-08 Thread Kyle Hamilton
Dr. Henson: May I direct your attention to the thread entitled "RE: [openssl.org #1204]: bad record mac because of wrong SSL_OP_TLS_BLOCK_PADDING_BUG handling" on the openssl-dev list? It appears to be because of a zlib size calculation change. However, the specifics are slightly different betwe

Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-08 Thread Dr. Stephen Henson
On Wed, Feb 08, 2006, Michael Smith wrote: > > A follow-up to my own post from last week. I've done some more digging - > hopefully this is enough for someone to offer some suggestions. > > I have been trying different versions of openssl with apache on solaris and > sun cc. With versions >= 0

Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-08 Thread Michael Smith
Thanks Kyle,Sorry if I'm being daft here - I have tried to read some of the docs and done a google search - but how do I turn off backward-compatability?Michael On 2/8/06, Kyle Hamilton <[EMAIL PROTECTED]> wrote: This sounds suspiciously like a bug due to turning on compatibilitywith broken SSL imp

Re: openssl 0.9.7 and above break apache with firefox on solaris

2006-02-08 Thread Kyle Hamilton
This sounds suspiciously like a bug due to turning on compatibility with broken SSL implementations that was found and quashed about a week ago. If you turn off backward-compatibility (including MSIE broken SSL implementation), does the problem persist? -Kyle H On 2/8/06, Michael Smith <[EMAIL P

openssl 0.9.7 and above break apache with firefox on solaris

2006-02-08 Thread Michael Smith
Hi there,   A follow-up to my own post from last week.  I've done some more digging - hopefully this is enough for someone to offer some suggestions.   I have been trying different versions of openssl with apache on solaris and sun cc.  With versions >= 0.9.7 (see below exact list of releases teste