I'm having trouble resolving an openssl issue. It seems to be related to
a recent system update of openssl. At first I thought recompiling
nsopenssl against the new openssl libraries would fix the issue, however
I am still seeing the problem.
The system is:
Debian 3.0
OpenSSL 0.9.6c-2
nsopenssl 2.
Digging deeper (thanks Andrew P) the instability seems to stem from the
OpenSSL patch for RSA blinding. Some pertinent information from Debian
Security Advisory DSA 288-1:
"Unfortunately, RSA blinding is not thread-safe and will cause failures
for programs that use threads and OpenSSL such as stun
At Thursday 06:57 AM 9/18/2003 -0600, you wrote:
Digging deeper (thanks Andrew P) the instability seems to stem from the
OpenSSL patch for RSA blinding.
I posted about a similar (and almost certainly related) issue to yours a
few months back:
http://listserv.aol.com/cgi-bin/wa?A2=ind0304&L=aolserve
