Welcome! Log In Create A New Profile

Advanced

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Maxim Dounin
March 20, 2020 06:14PM
Hello!

On Fri, Mar 20, 2020 at 09:54:08AM -0400, itpp2012 wrote:

> Maxim Dounin Wrote:
> -------------------------------------------------------
> > On Fri, Mar 20, 2020 at 10:41:32AM +0300, Sergey Kandaurov wrote:
> > > > On 18 Mar 2020, at 14:17, itpp2012 <nginx-forum@forum.nginx.org>
> wrote:
> > > > Question: does this need to resolved in openssl or nginx ?
>
> > > So, they deliberately changed existing behaviour, known since
> > > at least OpenSSL 0.9.7, in the stable branch which should not
> > > be targeted (per their words) for introducing behaviour changes.
> > > That is unfortunate and beyond explanation.
>
> > I think a separate condition in an #ifdef might be preferred here,
> > probably with better debug logging as well.
>
> I'd prefer an openssl fix but can we now assume nginx prefers a nginx fix ?

Well, reverting OpenSSL behaviour back to one existed for years
would be awesome. Unfortunately, this might never happen, as
OpenSSL's team usually don't care.

Also, even if this will happen, there will be at least some
versions of OpenSSL when things behave incorrectly.

As such, we certainly have to consider how to fix it on nginx
side. Whether or not we'll commit the fix is a different
question.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 18, 2020 07:17AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

J.R. March 18, 2020 09:32AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 18, 2020 09:52AM

RE: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Reinis Rozitis March 19, 2020 05:54PM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Sergey Kandaurov March 20, 2020 03:42AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Maxim Dounin March 20, 2020 09:00AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 20, 2020 09:54AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Maxim Dounin March 20, 2020 06:14PM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 21, 2020 04:49PM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 22, 2020 02:39PM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Sergey Kandaurov March 23, 2020 07:06AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 March 23, 2020 07:41AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Maxim Dounin March 23, 2020 08:36AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

Thomas Stephen Lee April 02, 2020 01:46AM

Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

itpp2012 April 02, 2020 03:24AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 71
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready