Am Donnerstag, 14. November 2013, 14:05:14 schrieb Roland Koebler: > Hi, > > > I have packages with an updated patch from upstream for a > > different > > ssl related regression (#729480). Unfortunately, I am at the > > moment > > short of time to test it. If you could check if these packages fix > > your regression, too, that would be a great help. > > no, it does not fix the regression. > > But I tried some more, and I noticed that this only occurs with some > certificates, maybe only with some ca-files (or a combination of > pemfiles and ca-files). Maybe the OpenSSL-error-message, wget > returns (with both 1.4.31-4+deb7u1 and 7u2), can help: > > $ wget --no-check-certificate https://localhost > --2013-11-14 13:42:27-- https://localhost/ > Resolving localhost... 127.0.0.1 > Connecting to localhost|127.0.0.1|:443... connected. > OpenSSL: error:1408E098:SSL routines:SSL3_GET_MESSAGE:excessive > message size Unable to establish SSL connection.
Thank you very much for testing. Maybe someone else has time to debug this, or maybe I will have time tomorrow. FTR, the packages with the fix from #729480 are at http://people.debian.org/~sf/729555/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
