[Bug 299615] openssl 3.5.6 has a bug in s_client

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=299615

            Bug ID: 299615
           Summary: openssl 3.5.6 has a bug in s_client
           Product: Base System
           Version: 15.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: bunny.evans@gmail.com

There is a bug in the built-in openssl 3.5.6 which causes it to fail rsyncs.

(Summary by claude opus)

OpenSSL 3.5.6 added a check that rejects any chunk read from stdin that fills
the entire 16 KB buffer, but it didn’t reduce the amount it reads. When rsync
starts sending its block checksums (about 1.3 MB for xbl), s_client reads a
full 16 KB chunk, rejects it, and exits silently. That’s why the transcript
shows no TLS error at all. Small exchanges never fill the buffer, so the
customer still sees the welcome message and the file list.

This confusion is compounded because the PKG version is 3.5.9 and there are now
2 openssl on the system.

CRON puts /usr/bin before /usr/local/bin. so it invariably gets the buggy
version and spamhaus-sync fails miserably.

-- 
You are receiving this mail because:
You are the assignee for the bug.