[Bug 2055304] Re: openssl 3.0.2 backport IgnoreUnexpectedEOF ssl config option from 3.2
Ubuntu Foundations Team Bug Bot
2055304 at bugs.launchpad.net
Wed Feb 28 16:16:15 UTC 2024
The attachment "Add IgnoreUnexpectedEOF as configuration option for
3.0.2-0ubuntu1.15" seems to be a patch. If it isn't, please remove the
"patch" flag from the attachment, remove the "patch" tag, and if you are
a member of the ~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2055304
Title:
openssl 3.0.2 backport IgnoreUnexpectedEOF ssl config option from 3.2
Status in openssl package in Ubuntu:
New
Bug description:
I get "Closing connection 0 curl: (35) error:0A000126:SSL
routines::unexpected eof while reading" accessing some web servers.
AFAIS "SSL_OP_IGNORE_UNEXPECTED_EOF" can help here. With 3.2[0] it can
be configured in openssl.cnf, whereas 3.0[1] cannot. Would you mind to
backport the mini patch[2] to be configured with 3.0, too?
Example:
$ tail -n 3 /etc/ssl/openssl.cnf
[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=2
Options = IgnoreUnexpectedEOF
[0] https://www.openssl.org/docs/man3.2/man3/SSL_CONF_cmd.html
[1] https://www.openssl.org/docs/man3.0/man3/SSL_CONF_cmd.html
[2] https://github.com/openssl/openssl/commit/51cf034433d528876f3c235c5150c5acfe88f24d
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2055304/+subscriptions
More information about the foundations-bugs
mailing list