From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Dec 28 21:40:02 2009 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1E2DB1065679 for ; Mon, 28 Dec 2009 21:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id D87B78FC13 for ; Mon, 28 Dec 2009 21:40:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id nBSLe1Wd065693 for ; Mon, 28 Dec 2009 21:40:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id nBSLe1QH065692; Mon, 28 Dec 2009 21:40:01 GMT (envelope-from gnats) Resent-Date: Mon, 28 Dec 2009 21:40:01 GMT Resent-Message-Id: <200912282140.nBSLe1QH065692@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Paul Dokas Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7EE181065693 for ; Mon, 28 Dec 2009 21:30:52 +0000 (UTC) (envelope-from dokas@cdward.oitsec.umn.edu) Received: from cdward.oitsec.umn.edu (cdward.oitsec.umn.edu [160.94.247.237]) by mx1.freebsd.org (Postfix) with ESMTP id 5FB078FC22 for ; Mon, 28 Dec 2009 21:30:51 +0000 (UTC) Received: by cdward.oitsec.umn.edu (Postfix, from userid 1003) id 4A9082841C; Mon, 28 Dec 2009 15:30:51 -0600 (CST) Message-Id: <20091228213051.4A9082841C@cdward.oitsec.umn.edu> Date: Mon, 28 Dec 2009 15:30:51 -0600 (CST) From: Paul Dokas To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/142111: tor-devel-0.2.2.6a and recent openssl patches don't work well together X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Paul Dokas List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Dec 2009 21:40:02 -0000 >Number: 142111 >Category: ports >Synopsis: tor-devel-0.2.2.6a and recent openssl patches don't work well together >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Dec 28 21:40:01 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Paul Dokas >Release: FreeBSD 8.0-RELEASE-p1 amd64 >Organization: University of Minnesota >Environment: System: FreeBSD host.umn.edu 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #0: Wed Dec 23 08:14:54 CST 2009 root@host.umn.edu:/usr/obj/usr/src/sys/O-8B amd64 >Description: After upgrading my machine to 8.0 and rebuilding all installed ports, I found that tor no longer functions. It's logging these errors: Dec 28 15:21:34.464 [notice] Application request when we're believed to be offline. Optimistically trying directory fetches again. Dec 28 15:21:34.600 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:21:34.600 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 611; recommendation warn) Dec 28 15:21:34.809 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:21:34.809 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 612; recommendation warn) Dec 28 15:22:50.697 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK) Dec 28 15:22:50.697 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 613; recommendation warn) >How-To-Repeat: build security/tor-devel and attempt to use it >Fix: https://bugs.torproject.org/flyspray/index.php?do=details&id=1144 Here's their analysis: "The problem is that FreeBSD decided to patch openssl to disallow renegotiation, without giving applications a way to re-enable it like openssl upstream did. Tor will not work on those system until they have changed this, or Tor is updated to work without renegotiation. This might take a long time to happen, though." >Release-Note: >Audit-Trail: >Unformatted: