Bug #14176 for IO-Socket-SSL: "make test" fails with OpenSSL 0.9.8

Mon Aug 15 17:11:18 2005 Guest - Ticket created

Subject:

"make test" fails with OpenSSL 0.9.8

I'm experiencing the same "make test" failures as posted in the pass/test area of this module. (0.97) I've also tried 0.97 with a complete recompile of perl 5.8.6, and the errors are the same, so it's not a problem introduced with 5.8.7. Then I remembered I had upgraded OpenSSL to 0.9.8 the other week. Sure enough, OpenSSL 0.9.7g with IO::Socket::SSL 0.97 "make test" runs fine. All my other apps (apache, ssh, etc) that use OpenSSL work fine with 0.9.8, except for this perl module. I also tried Net_SSLeay v1.26, to see if that fixed this issue, and it didn't. Since t/compatiblity.t is the first module to fail, I modified it to add in "qw(debug4)" when loading the module, and here's the verbose output: 1..9 ok SSL connect attempt failederror:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac at blib/lib/IO/Socket/SSL.pm line 458 IO::Socket::SSL::error('MyClass=GLOB(0x81efe5c)', 'SSL connect attempt failed') called at blib/lib/IO/Socket/SSL.pm line 131 IO::Socket::SSL::connect_SSL('MyClass=GLOB(0x81efe5c)', 'MyClass=GLOB(0x81efe5c)') called at blib/lib/IO/Socket/SSL.pm line 374 IO::Socket::SSL::start_SSL('MyClass', 'MyClass=GLOB(0x81efe5c)') called at t/compatibility.t line 45 not ok not ok Can't locate object method "issuer_name" via package "IO::Socket::INET" at t/compatibility.t line 49. SSL accept attempt failederror:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac at t/compatibility.t line 62 not ok Socket has no fileno at t/compatibility.t line 71 ok ok Any thoughts? It looks like it can't create the socket.

Wed Nov 30 07:36:13 2005 rafl [...] debian.org - Correspondence added

[guest - Mon Aug 15 17:11:18 2005]: Show quoted text

> I'm experiencing the same "make test" failures as posted in the > pass/test area of this module. (0.97) I've also tried 0.97 with a > complete recompile of perl 5.8.6, and the errors are the same, so > it's not a problem introduced with 5.8.7. Then I remembered I had > upgraded OpenSSL to 0.9.8 the other week. Sure enough, OpenSSL > 0.9.7g with IO::Socket::SSL 0.97 "make test" runs fine. All my > other apps (apache, ssh, etc) that use OpenSSL work fine with > 0.9.8, except for this perl module. I also tried Net_SSLeay v1.26, > to see if that fixed this issue, and it didn't. > > Since t/compatiblity.t is the first module to fail, I modified it to > add in "qw(debug4)" when loading the module, and here's the verbose > output: > > 1..9 > ok > SSL connect attempt failederror:140943FC:SSL > routines:SSL3_READ_BYTES:sslv3 alert bad record mac > at blib/lib/IO/Socket/SSL.pm line 458 > IO::Socket::SSL::error('MyClass=GLOB(0x81efe5c)', 'SSL connect > attempt failed') called at blib/lib/IO/Socket/SSL.pm line 131 > IO::Socket::SSL::connect_SSL('MyClass=GLOB(0x81efe5c)', > 'MyClass=GLOB(0x81efe5c)') called at blib/lib/IO/Socket/SSL.pm line > 374 > IO::Socket::SSL::start_SSL('MyClass', > 'MyClass=GLOB(0x81efe5c)') called at t/compatibility.t line 45 > not ok > not ok > Can't locate object method "issuer_name" via package > "IO::Socket::INET" at t/compatibility.t line 49. > SSL accept attempt failederror:1408F455:SSL > routines:SSL3_GET_RECORD:decryption failed or bad record mac > at t/compatibility.t line 62 > not ok > Socket has no fileno > at t/compatibility.t line 71 > ok > ok > > > Any thoughts? It looks like it can't create the socket.

This is caused by Net::SSLeay. If you compile it against libssl 0.9.7 it works. I'm currently investigating this issue -Flo

Fri May 05 14:33:53 2006 Guest - Correspondence added

On Wed Nov 30 07:36:13 2005, FLORA wrote: Show quoted text

> [guest - Mon Aug 15 17:11:18 2005]: >

> > I'm experiencing the same "make test" failures as posted in the > > pass/test area of this module. (0.97) I've also tried 0.97 with a > > complete recompile of perl 5.8.6, and the errors are the same, so > > it's not a problem introduced with 5.8.7. Then I remembered I had > > upgraded OpenSSL to 0.9.8 the other week. Sure enough, OpenSSL > > 0.9.7g with IO::Socket::SSL 0.97 "make test" runs fine. All my > > other apps (apache, ssh, etc) that use OpenSSL work fine with > > 0.9.8, except for this perl module. I also tried Net_SSLeay v1.26, > > to see if that fixed this issue, and it didn't.

I've finally figured this one out! It's because OpenSSL 0.9.8 now wants to include zlib when it compiles. If you compile it with "no-zlib", then IO::Socket::SSL works fine. The reason it's failing is because its receiving a compressed datastream, and IO::Socket::SSL doesn't know how to deal with it. By disabling compression in openssl, IO::Socket::SSL works fine. This bug can be closed out.

Fri May 05 14:33:54 2006 The RT System itself - Status changed from 'new' to 'open'

Wed Jul 19 07:07:46 2006 Steffen_Ullrich [...] genua.de - Correspondence added

Bug is closed now. On Fri May 05 14:33:53 2006, guest wrote: Show quoted text

> ... > I've finally figured this one out! It's because OpenSSL 0.9.8 now wants > to include zlib when it compiles. If you compile it with "no-zlib", > then IO::Socket::SSL works fine. > > The reason it's failing is because its receiving a compressed > datastream, and IO::Socket::SSL doesn't know how to deal with it. By > disabling compression in openssl, IO::Socket::SSL works fine. > > This bug can be closed out. >

Wed Jul 19 07:07:55 2006 Steffen_Ullrich [...] genua.de - Status changed from 'open' to 'resolved'

Wed Jul 19 07:08:09 2006 Steffen_Ullrich [...] genua.de - Status changed from 'resolved' to 'open'

Wed Jul 19 07:08:56 2006 Steffen_Ullrich [...] genua.de - Correspondence added

closed again, sorry

Wed Jul 19 07:09:14 2006 Steffen_Ullrich [...] genua.de - Status changed from 'open' to 'resolved'