Stephen Henson via RT <rt <at> openssl.org> writes:
> I've updated OpenSSL so the padding extension is no longer used by default 

Stephen,
Does not work for me. Running sendmail 8.14.8, got the "decode error"
problem with openssl 1.0.1g, fixed it by ssl/tls1.h changing to  
/* #define TLSEXT_TYPE_padding 21 */.
Sine May, that worked.

At Jun10, compiled openssl 1.0.1.h from source and the sendmail decode error
came back by Jun 12.
Did not realize that until Jun 22. 
Today, disabled the extension completly:
ssl/ssl.h: #define SSL_OP_TLSEXT_PADDING 0x00000000L

Sendmail queue emptied after restart without further problems.

greetings, Stefan
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to