#280 "make verify" fails on FreeBSD OpenSSL tests

For_2.0
open
nobody
5
2012-06-03
2012-06-03
No

OS: FreeBSD 8.x and 9.x
Libevent versions tested: 2.0.15 and 2.0.19
OpenSSL version: 1.0.1c

During the "make verify" regression tests two tests failed:

...............
regress: ssl/bufferevent_renegotiate_socketpair:
FAIL regress_ssl.c:335: assert(test_is_done == 1)
[bufferevent_renegotiate_socketpair FAILED]
ssl/bufferevent_renegotiate_filter:
FAIL regress_ssl.c:335: assert(test_is_done == 1)
[bufferevent_renegotiate_filter FAILED]
2/179 TESTS FAILED. (0 skipped)
.................

It happens with kqueue, poll and select I/O engines.

It happens with both 32 bits and 64 bits OS versions.

I am attaching the event-config.h file, generated on my FreeBSD 8.2 32-bits system, just in case if it helps.
I also tested it on FreeBSD 9.0 amd64 64-bits system, the error is exactly the same.

Discussion

  • Oleg Moskalenko

    Oleg Moskalenko - 2012-06-03

    event-config.h generated file

     
  • Nick Mathewson

    Nick Mathewson - 2012-06-03

    This is actually an openssl bug that prevents OpenSSL 1.0.1 from renegotiating with itself successfully when it has negotiated TLS 1.1 or TLS 1.2.

    It doesn't seem to have an OpenSSL ticket yet; we only figured it out yesterday on the Tor bugtracker. See https://trac.torproject.org/projects/tor/ticket/6033 for what we learned there. With any luck, this should be fixed in openssl 1.0.1d or 1.0.1e. It is nothing to worry about, unless you're using renegotiation with OpenSSL and TLS 1.1 or TLS 1.2.

     
  • Oleg Moskalenko

    Oleg Moskalenko - 2012-06-03

    Thank you for the explanation.

    I just noticed that it happens on Linux, too, so this is not a FreeBSD specific bug, this is an all-platforms bugs.

     

Log in to post a comment.