Date: Mon, 28 Dec 2009 15:30:51 -0600 (CST) From: Paul Dokas <dokas@oitsec.umn.edu> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/142111: tor-devel-0.2.2.6a and recent openssl patches don't work well together Message-ID: <20091228213051.4A9082841C@cdward.oitsec.umn.edu> Resent-Message-ID: <200912282140.nBSLe1QH065692@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 142111 >Category: ports >Synopsis: tor-devel-0.2.2.6a and recent openssl patches don't work well together >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Dec 28 21:40:01 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Paul Dokas >Release: FreeBSD 8.0-RELEASE-p1 amd64 >Organization: University of Minnesota >Environment: System: FreeBSD host.umn.edu 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #0: Wed Dec 23 08:14:54 CST 2009 root@host.umn.edu:/usr/obj/usr/src/sys/O-8B amd64 >Description: After upgrading my machine to 8.0 and rebuilding all installed ports, I found that tor no longer functions. It's logging these errors: Dec 28 15:21:34.464 [notice] Application request when we're believed to be offline. Optimistically trying directory fetches again. Dec 28 15:21:34.600 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:21:34.600 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 611; recommendation warn) Dec 28 15:21:34.809 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:21:34.809 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 612; recommendation warn) Dec 28 15:22:50.697 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:22:50.697 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 613; recommendation warn) >How-To-Repeat: build security/tor-devel and attempt to use it >Fix: https://bugs.torproject.org/flyspray/index.php?do=details&id=1144 Here's their analysis: "The problem is that FreeBSD decided to patch openssl to disallow renegotiation, without giving applications a way to re-enable it like openssl upstream did. Tor will not work on those system until they have changed this, or Tor is updated to work without renegotiation. This might take a long time to happen, though." >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091228213051.4A9082841C>