CPU/Engine: VIA C7 Esther/Padlock
OS: Linux 686 (Debian)
Affected OpenSSL versions: 1.0.0e through 1.0.0g
Last known working version: 1.0.0d
Starting with 1.0.0e the following error occurs when OpenSSL is used
with the padlock engine (client: openssl s_client):
openssl s_server -cert /etc/ssl/private/server.crt -key
/etc/ssl/private/server.key -ssl3 -engine padlock -state -msg -debug
engine "padlock" set.
Using default temp DH parameters
Using default temp ECDH parameters
ACCEPT
SSL_accept:before/accept initialization
read from 0x9646110 [0x964b6cb] (5 bytes => 5 (0x5))
- 16 03 00 00 86.
read from 0x9646110 [0x964b6d0] (134 bytes => 134 (0x86))
- 01 00 00 82 03 00 4f 46-8b 24 d5 a4 07 38 23 e0 ..OF.$...8#.
0010 - 69 fa d2 71 06 94 6a 77-71 b8 ac 3f 8b 7a e8 da i..q..jwq..?.z..
0020 - 8e db 5d fc b2 03 00 00-5a c0 14 c0 0a 00 39 00 ..].Z.9.
0030 - 38 00 88 00 87 c0 0f c0-05 00 35 00 84 c0 12 c0 8.5.
0040 - 08 00 16 00 13 c0 0d c0-03 00 0a c0 13 c0 09 00
0050 - 33 00 32 00 9a 00 99 00-45 00 44 c0 0e c0 04 00 3.2.E.D.
0060 - 2f 00 96 00 41 c0 11 c0-07 c0 0c c0 02 00 05 00 /...A...
0070 - 04 00 15 00 12 00 09 00-14 00 11 00 08 00 06 00
0080 - 03 00 ff 02 01.
0086 -
<<< SSL 3.0 Handshake [length 0086], ClientHello
01 00 00 82 03 00 4f 46 8b 24 d5 a4 07 38 23 e0
69 fa d2 71 06 94 6a 77 71 b8 ac 3f 8b 7a e8 da
8e db 5d fc b2 03 00 00 5a c0 14 c0 0a 00 39 00
38 00 88 00 87 c0 0f c0 05 00 35 00 84 c0 12 c0
08 00 16 00 13 c0 0d c0 03 00 0a c0 13 c0 09 00
33 00 32 00 9a 00 99 00 45 00 44 c0 0e c0 04 00
2f 00 96 00 41 c0 11 c0 07 c0 0c c0 02 00 05 00
04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00
03 00 ff 02 01 00
SSL_accept:SSLv3 read client hello A
>>> SSL 3.0 Handshake [length 0051], ServerHello
02 00 00 4d 03 00 4f 46 8b 24 66 48 ab 9e 71 52
22 13 d6 cb 40 1d e3 32 04 e0 d3 5e e2 89 fc 77
e7 4c be f6 2a ca 20 2b 1e c1 8b 11 86 72 e5 f0
89 6f ce cf 1e 4c f9 65 97 86 60 fa c5 6c c0 cb
bf 68 9b ec 80 8f 0e c0 14 01 00 05 ff 01 00 01
00
write to 0x9646110 [0x9655148] (86 bytes => 86 (0x56))
- 16 03 00 00 51 02 00 00-4d 03 00 4f 46 8b 24 66 Q...M..OF.$f
0010 - 48 ab 9e 71 52 22 13 d6-cb 40 1d e3 32 04 e0 d3 H..qR"...@..2...
0020 - 5e e2 89 fc 77 e7 4c be-f6 2a ca 20 2b 1e c1 8b ^...w.L..*. +...
0030 - 11 86 72 e5 f0 89 6f ce-cf 1e 4c f9 65 97 86 60 ..r...o...L.e..`
0040 - fa c5 6c c0 cb bf 68 9b-ec 80 8f 0e c0 14 01 00 ..l...h.
0050 - 05 ff 01 00 01.
0056 -
SSL_accept:SSLv3 write server hello A
>>> SSL 3.0 Handshake [length 022c], Certificate
0b 00 02 28 00 02 25 00 02 22 30 82 02 1e 30 82
01 87 a0 03 02 01 02 02 09 00 de a2 86 55 3a 56
c6 e7 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05
00 30 28 31 0b 30 09 06 03 55 04 06 13 02 50 4c
31 0a 30 08 06 03 55 04 08 0c 01 20 31 0d 30 0b
06 03 55 04 0a 0c 04 63 61 72 6c 30 1e 17 0d 31
32 30 32 32 32 31 38 33 34 31 34 5a 17 0d 31 35
30 32 32 31 31 38 33 34 31 34 5a 30 28 31 0b 30
09 06 03 55 04 06 13 02 50 4c 31 0a 30 08 06 03
55 04 08 0c 01 20 31 0d 30 0b 06 03 55 04 0a 0c
04 63 61 72 6c 30 81 9f 30 0d 06 09 2a 86 48 86
f7 0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81
81 00 d8 a0 c1 37 2d ce 8b 6e d5 5f 1d 9d 51 d4
cd 6e f7 f0 af 67 b0 dc c7 e1 36 bb 56 a5 a5 df
df a7 b6 30 22 37 39 7e b3 37 26 64 6c 6c 4d 61
5f 3b 56 bc 17 a2 61 15 71 68 ee 63 ba 8b 7e e5
38 a2 b8 bb c9 bd b5 80 d6 4c 01 bf 5a ed 69 cf
20 9f a4 82 53 70 aa 3c 40 ad 06 ff 35 01 8d b1
1d a5 fc 22 60 6d 5f 73 63 e6 b9 af ca d1 9d 3b
c5 ae 8e 3a 90 0f 0e f3 a6 fc c7 89 86 7c 44 b6
0b 71 02 03 01 00 01 a3 50 30 4e 30 1d 06 03 55
1d 0e 04 16 04 14 b9 6f 26 93 61 c2 b1 d2 de 95
38 e5 13 87 bc 08 64 4a 95 4a 30 1f 06 03 55 1d
23 04 18 30 16 80 14 b9 6f 26 93 61 c2 b1 d2 de
95 38 e5 13 87 bc 08 64 4a 95 4a 30 0c 06 03 55
1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48
86 f7 0d 01 01 05 05 00 03 81 81 00 58 32 b9 2d
5d 96 84 03 26 25 6a 54 46 70 5a 2e 3b 5c 8c bb
55 e6 a9 c7 46 59 5c f1 73 f8 45 33 3a b8 40 95
6c 9c d5 5b 1f 10 97 ac cb b8 db 45 3d 07 11 b8
c5 f9 da 1a 18 65 56 39 e7 a7 1a ca a6 28 82 63
24 6a 3b 1c aa 1b a0 9b 45 fd 1d e5 54 7d ed c4
87 89 bd cd 05 6b d0 19 f7 b7 bf 80 db 38 43 26
8a 74 d6 29 bf 9c 55 4c aa 4f 80 96 a2 ce 2e a8
d2 79 6b 7f 7f 59 29 a2 db 5d f9 cb
write to 0x9646110 [0x9655148] (561 bytes => 561 (0x231))
- 16 03 00 02 2c 0b 00 02-28 00 02 25 00 02 22 30 ,...(..%.."0
0010 - 82 02 1e 30 82 01 87 a0-03 02 01 02 02 09 00 de ...0
0020 - a2 86 55 3a 56 c6 e7 30-0d 06 09 2a 86 48 86 f7 ..U:V..0...*.H..
0030 - 0d 01 01 05 05 00 30 28-31 0b 30 09 06 03 55 04 ..0(1.0...U.
0040 - 06 13 02 50 4c 31 0a 30-08 06 03 55 04 08 0c
