From owner-freebsd-current@FreeBSD.ORG  Sun Jul 15 04:14:43 2012
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx2.freebsd.org (mx2.freebsd.org [69.147.83.53])
	by hub.freebsd.org (Postfix) with ESMTP id 1B3201065676;
	Sun, 15 Jul 2012 04:14:43 +0000 (UTC)
	(envelope-from dougb@FreeBSD.org)
Received: from opti.dougb.net (hub.freebsd.org [IPv6:2001:4f8:fff6::36])
	by mx2.freebsd.org (Postfix) with ESMTP id 78AB214E4FF;
	Sun, 15 Jul 2012 04:14:42 +0000 (UTC)
Message-ID: <500243B1.1010705@FreeBSD.org>
Date: Sat, 14 Jul 2012 21:14:41 -0700
From: Doug Barton <dougb@FreeBSD.org>
Organization: http://SupersetSolutions.com/
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:13.0) Gecko/20120621 Thunderbird/13.0.1
MIME-Version: 1.0
To: Jan Beich <jbeich@tormail.org>
References: <1SpuD9-0006kw-6D@internal.tormail.org>
In-Reply-To: <1SpuD9-0006kw-6D@internal.tormail.org>
X-Enigmail-Version: 1.4.2
OpenPGP: id=1A1ABC84
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-current@freebsd.org, Jung-uk Kim <jkim@FreeBSD.org>
Subject: Re: fetch(1) fails with https:// - Authentication error
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Jul 2012 04:14:43 -0000

On 07/13/2012 21:21, Jan Beich wrote:
> It seems recent OpenSSL update broke fetch(1) for me.
> 
>   $ diff -u $SRC_BASE/crypto/openssl/apps/openssl.cnf /etc/ssl/openssl.cnf
>   $ fetch https://foo/bar
>   fetch: https://foo/bar: Authentication error
> 
> Same error as with the patch for 1.0.0d from a year ago and
> same workaround - s/SSLv23_client_method/SSLv3_client_method/.

FWIW, I have a gcc world and I'm not seeing this problem with r238444:

fetch https://www.isc.org/
fetch: https://www.isc.org/: size of remote file is not known
fetch.out                                               33 kB  227 kBps




-- 

    Change is hard.