Your message dated Tue, 23 Aug 2016 22:03:10 +0200
with message-id <[email protected]>
and subject line Re: Bug#694667: [Pkg-openssl-devel] Bug#694667: Partial
solution for OpenSSL 1.0.1 bugs #665452, #666051, #2771
has caused the Debian Bug report #694667,
regarding Partial solution for OpenSSL 1.0.1 bugs #665452, #666051, #2771
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
694667: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694667
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openssl
There is a bug in OpenSSL 1.0.1 where it can't connect to some servers
when the network's MTU is below 1500. Details here:
http://stackoverflow.com/questions/13596019/openssl-1-0-1-handshake-work
around-in-ubuntu
Partial fix:
sudo ifconfig eth0 mtu 1496
The issue seems to be caused by something with TLS hanging with
fragmented packets. Our network's MTU is 1496 instead of 1500. The
server would wait after the client sent the initial client hello
message. I tried everything from upgrading to 1.0.1-4ubuntu5.5 to
passing CAfile and -cipher with no luck. I am using Ubuntu 12.0.4 linux
3.2.0-24-generic.
Zack Morris
--- End Message ---
--- Begin Message ---
On 2012-12-17 19:37:29 [+0100], Kurt Roeckx wrote:
> There is nothing SSL can do about this, since this is above the
> TCP layer, and it's the TCP layer that's having a problem.
>
> At least from your description, I think that that is your problem,
> and if you don't think that's the case I'll need more information.
Just read the report and I agree here with Kurt.
Closing since there is nothing openssl can do here.
> Kurt
Sebastian
--- End Message ---
