Opened 9 years ago

Last modified 7 years ago

#1191 closed defect (Duplicate)

renegotiation bug still present in 0.2.2.6-alpha on OpenBSD 4.6 stable

Reported by: nixmlists Owned by:
Priority: Low Milestone:
Component: Core Tor/Tor Version: 0.2.1.21
Severity: Keywords:
Cc: nixmlists Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Renegotiation bug still present on OpenBSD 4.6 with
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6/common/004_openssl.patch applied.

Results in the supposedly fixed TLS renegotiation errors in 0.2.2.6-alpha, and prevents it from working. Works without the patch, but that
leaves the whole system vulnerable.

[warn] TLS error: unexpected close while renegotiating

same exact problem with 0.2.1.21

OpenBSD 4.6 ships with OpenSSL 0.9.8k

What is the work-around?

[Automatically added by flyspray2trac: Operating System: Other]

Child Tickets

Change History (2)

comment:1 Changed 9 years ago by Sebastian

comment:2 Changed 7 years ago by nickm

Component: Tor RelayTor
Note: See TracTickets for help on using tickets.