ports/142111: tor-devel-0.2.2.6a and recent openssl patches don't work well together

[Paul Dokas]

>Number:         142111
>Category:       ports
>Synopsis:       tor-devel-0.2.2.6a and recent openssl patches don't work well together
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 28 21:40:01 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Paul Dokas
>Release:        FreeBSD 8.0-RELEASE-p1 amd64
>Organization:
University of Minnesota
>Environment:
System: FreeBSD host.umn.edu 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #0: Wed Dec 23 08:14:54 CST 2009 root at host.umn.edu:/usr/obj/usr/src/sys/O-8B amd64
>Description:
After upgrading my machine to 8.0 and rebuilding all installed ports, I
found that tor no longer functions.  It's logging these errors:

Dec 28 15:21:34.464 [notice] Application request when we're believed to be offline. Optimistically trying directory fetches again.
Dec 28 15:21:34.600 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK)
Dec 28 15:21:34.600 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 611;
recommendation warn)
Dec 28 15:21:34.809 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK)
Dec 28 15:21:34.809 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 612;
recommendation warn)
Dec 28 15:22:50.697 [warn] TLS error: unexpected close while renegotiating (SSL_ST_OK)
Dec 28 15:22:50.697 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 613;
recommendation warn)

>How-To-Repeat:
build security/tor-devel and attempt to use it

>Fix:

https://bugs.torproject.org/flyspray/index.php?do=details&id=1144

Here's their analysis:

"The problem is that FreeBSD decided to patch openssl to disallow renegotiation,
 without giving applications a way to re-enable it like openssl upstream did. Tor
 will not work on those system until they have changed this, or Tor is updated to
 work without renegotiation. This might take a long time to happen, though."
>Release-Note:
>Audit-Trail:
>Unformatted: