[Bug 262107] security/tinc-devel - Error while encrypting: error:060A6094:digital envelope routines:EVP_DecryptUpdate:invalid operation

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 21 Feb 2022 20:53:11 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262107

            Bug ID: 262107
           Summary: security/tinc-devel - Error while encrypting:
                    error:060A6094:digital envelope
                    routines:EVP_DecryptUpdate:invalid operation
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: dinoex@FreeBSD.org
          Reporter: aaron@heyaaron.com
          Assignee: dinoex@FreeBSD.org
             Flags: maintainer-feedback?(dinoex@FreeBSD.org)

This is similar to 242162, but that bug is pretty old.


After installing tinc 1.1pre18 on ~30 routers, all of them give the following
error message when trying to connect to each other:

Error while encrypting: error:060A6094:digital envelope
routines:EVP_DecryptUpdate:invalid operation

Downgrading to 1.1pre17 fixes the issue and restores connectivity.

There is a related Debian bug here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923438

Their fix was to downgrade libssl1.1 to 1.1.1a-1.

-- 
You are receiving this mail because:
You are the assignee for the bug.