Public bug reported:

Description:

Since upgrading to Ubuntu 26.04 LTS, large file downloads (>50MB) 
intermittently fail with:
OpenSSL error: error:0A000119:SSL routines::decryption failed or bad record mac

Reproduction:
# Fails (OpenSSL):
curl -o /dev/null 
https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb

# Succeeds (GnuTLS):
wget -O /dev/null 
https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb

Affected tools: curl, apt (switched to OpenSSL in 26.04), snap (tls: bad record 
MAC)
Working tools: wget (uses GnuTLS)

Environment:
- Ubuntu 26.04 LTS, kernel 7.0.0-22-generic
- OpenSSL 3.5.5-1ubuntu3.2
- WiFi: Realtek RTL8852AE (rtw89_8852ae)
- Small downloads always succeed, large ones fail intermittently
- Same file, same network — only the TLS library differs

Note: Ubuntu 26.04 switched apt from GnuTLS to OpenSSL, making this a
regression for apt users.

ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: openssl 3.5.5-1ubuntu3.2
ProcVersionSignature: Ubuntu 7.0.0-22.22-generic 7.0.0
Uname: Linux 7.0.0-22-generic x86_64
ApportVersion: 2.34.0-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Thu Jun 18 03:50:18 2026
InstallationDate: Installed on 2025-07-23 (329 days ago)
InstallationMedia: Ubuntu 24.04.2 LTS "Noble Numbat" - Release amd64 (20250215)
SourcePackage: openssl
UpgradeStatus: Upgraded to resolute on 2026-05-24 (24 days ago)

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug resolute wayland-session

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2157062

Title:
   Large TLS downloads fail with "bad record MAC" — curl/apt fail, wget
  succeeds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2157062/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to