[Bug 294057] openssl: Authentication error on powerpc64

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294057

            Bug ID: 294057
           Summary: openssl: Authentication error on powerpc64
           Product: Base System
           Version: 16.0-CURRENT
          Hardware: powerpc
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: jing@jing.rocks

Hi,

The openssl build on powerpc64 on 16.0-CURRENT doesn't work at all when using
fetch to connect over HTTPS:

cfarm440:~# fetch -v https://download.freebsd.org/README.TXT
resolving server address: download.freebsd.org:443
SSL options: 82004850
Peer verification enabled
Using OpenSSL default CA cert file and path
0000000801C5C010:error:0A000119:SSL routines:tls_get_more_records:decryption
failed or bad record
mac:/home/pkgbuild/worktrees/main/crypto/openssl/ssl/record/methods/tls_common.c:869:
0000000801C5C010:error:0A000139:SSL routines::record layer
failure:/home/pkgbuild/worktrees/main/crypto/openssl/ssl/record/rec_layer_s3.c:703:
fetch: https://download.freebsd.org/README.TXT: Authentication error


This doesn't happen to powerpc64le or aarch64 or x86_64, so it should be a big
endian issue?

And the openssl in ports collection work fine (e.g. using curl):

cfarm440:~# ldd $(which fetch)
/usr/bin/fetch:
        libfetch.so.6 => /usr/lib/libfetch.so.6 (0x8010b9000)
        libc.so.7 => /lib/libc.so.7 (0x8010ff000)
        libssl.so.35 => /usr/lib/libssl.so.35 (0x8014ad000)
        libcrypto.so.35 => /lib/libcrypto.so.35 (0x8015fe000)
        libsys.so.7 => /lib/libsys.so.7 (0x801ba8000)
        libthr.so.3 => /lib/libthr.so.3 (0x801bf7000)

cfarm440:~# ldd $(which curl)
/usr/local/bin/curl:
        libcurl.so.4 => /usr/local/lib/libcurl.so.4 (0x801082000)
        libnghttp2.so.14 => /usr/local/lib/libnghttp2.so.14 (0x8011b8000)
        libidn2.so.0 => /usr/local/lib/libidn2.so.0 (0x80121a000)
        libssh2.so.1 => /usr/local/lib/libssh2.so.1 (0x80127c000)
        libpsl.so.5 => /usr/local/lib/libpsl.so.5 (0x8012fa000)
        libssl.so.12 => /usr/local/lib/libssl.so.12 (0x80133c000)
        libcrypto.so.12 => /usr/local/lib/libcrypto.so.12 (0x801423000)
        libzstd.so.1 => /usr/local/lib/libzstd.so.1 (0x8018b4000)
        libbrotlidec.so.1 => /usr/local/lib/libbrotlidec.so.1 (0x80199d000)
        libbrotlicommon.so.1 => /usr/local/lib/libbrotlicommon.so.1
(0x8019da000)
        libz.so.6 => /lib/libz.so.6 (0x801a2b000)
        libthr.so.3 => /lib/libthr.so.3 (0x801a75000)
        libc.so.7 => /lib/libc.so.7 (0x801ada000)
        libunistring.so.5 => /usr/local/lib/libunistring.so.5 (0x801e88000)
        libm.so.5 => /lib/libm.so.5 (0x8020c5000)
        libsys.so.7 => /lib/libsys.so.7 (0x80211b000)

cfarm440:~# curl -I https://download.freebsd.org/README.TXT
HTTP/1.1 200 OK
Date: Thu, 26 Mar 2026 05:38:10 GMT
Content-Type: text/plain
Content-Length: 4259
Last-Modified: Thu, 07 May 2015 16:18:39 GMT
Connection: keep-alive
ETag: "554b905f-10a3"
Server: WeAreTheCloud/v0.01
Cache-Control: public, no-cache, stale-while-revalidate=600,
stale-if-error=86400
Strict-Transport-Security: max-age=31536000
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-inline'
Accept-Ranges: bytes


pkg info:
FreeBSD-caroot-16.snap20260309131115
FreeBSD-fetch-16.snap20260312173038
FreeBSD-fetch-dev-16.snap20260309131115
FreeBSD-fetch-dev-lib32-16.snap20260309131115
FreeBSD-fetch-lib32-16.snap20260312173038
FreeBSD-openssl-16.snap20260312173038
FreeBSD-openssl-dev-16.snap20260309131115
FreeBSD-openssl-dev-lib32-16.snap20260309131115
FreeBSD-openssl-lib-16.snap20260312173038
FreeBSD-openssl-lib32-16.snap20260312173038
ca_root_nss-3.117_2
curl-8.17.0
openssl-3.0.19,1

-- 
You are receiving this mail because:
You are the assignee for the bug.