Re: Recent OpenSSL update that breaks cloudfront and rubygems.org?

2012-04-21 Thread Dale Amon
On Sat, Apr 21, 2012 at 02:19:30AM +0100, Colin Watson wrote:
 On Fri, Apr 20, 2012 at 12:06:12PM -0500, Jordon Bedwell wrote:
  The recent update to OpenSSL in Precise has rendered cloudfront.com
  unusable (as well as several other hosts which people have noted
  throughout other various bugs -- the one I discovered was
  https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/986147).
 
 I'm basically despairing about this since every time I touch OpenSSL to
 try to fix one set of bugs it appears to break something else (and I
 should add that I haven't been getting creative, and very much want
 *not* to get creative, I've just been applying fixes from upstream).
 Since I'm about to be diving head-first into release chaos, I strongly
 encourage anyone who can to try to figure out a fix that doesn't cause
 connection to the other sites we just fixed to regress!

I'm pretty sure another person I work with filed it,
but precise had a recent fairly nasty problem. It
was creating a leaving behind a dangling /etc/nologin
link for some reason; and chkrootkit was claiming
that /sbin/init had 'suckit'. He did another Precise
install new and saw the same thing. Really scared the
hell out of us for awhile as it was a server that
was in use although not critical services.





-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Recent OpenSSL update that breaks cloudfront and rubygems.org?

2012-04-20 Thread Jordon Bedwell
The recent update to OpenSSL in Precise has rendered cloudfront.com
unusable (as well as several other hosts which people have noted
throughout other various bugs -- the one I discovered was
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/986147). Can we
please get a fix since this breaks downloading from RubyGems.org on
Precise and could potentially break quite a few development machines.
Doing -tls1 or -ssl3 or enforcing a specific cipher allows it to work
but this is a big problem considering it breaks many Python and Ruby
applications like bundler, net/https, rubygems, and eventmachine
(unless you work around it) and libraries and applications that rely
on them.

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: Recent OpenSSL update that breaks cloudfront and rubygems.org?

2012-04-20 Thread Oliver Grawert
hi,
On Fri, 20 Apr 2012 12:06:12 -0500
Jordon Bedwell jor...@envygeeks.com wrote:

 The recent update to OpenSSL in Precise has rendered cloudfront.com
 unusable (as well as several other hosts which people have noted
 throughout other various bugs -- the one I discovered was
have a look at 
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/965371

ciao
oli


pgpeYQnqFOk5A.pgp
Description: PGP signature
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: Recent OpenSSL update that breaks cloudfront and rubygems.org?

2012-04-20 Thread Colin Watson
On Fri, Apr 20, 2012 at 12:06:12PM -0500, Jordon Bedwell wrote:
 The recent update to OpenSSL in Precise has rendered cloudfront.com
 unusable (as well as several other hosts which people have noted
 throughout other various bugs -- the one I discovered was
 https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/986147).

I'm basically despairing about this since every time I touch OpenSSL to
try to fix one set of bugs it appears to break something else (and I
should add that I haven't been getting creative, and very much want
*not* to get creative, I've just been applying fixes from upstream).
Since I'm about to be diving head-first into release chaos, I strongly
encourage anyone who can to try to figure out a fix that doesn't cause
connection to the other sites we just fixed to regress!

-- 
Colin Watson   [cjwat...@ubuntu.com]

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss