[ipxe-devel] Ubuntu 18.04 libssl1.1 TLS 0x33444

[mail at localhorst.es]

​Dear experts,

after I updated the libssl1.1 package from the official Ubuntu 18.04 repository, iPXE is unable to connect to the Apache webserver over SSL.

The error messages:ipxe: TLS 0x33444 received overlength Handshake
ipxe: Download of "default.ipxe" failed: Invalid argument (http://ipxe.org/1c0de802)


iPXE is compiled with the following command:
make DEBUG=tls,x509,ocsp bin/undionly.kpxe TRUST=certs.pem


libssl1.1 package information (dpkg -s libssl1.1):
Package: libssl1.1
Status: install ok installed
Priority: important
Section: libs
Installed-Size: 3914
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Architecture: amd64
Multi-Arch: same
Source: openssl
Version: 1.1.1-1ubuntu2.1~18.04.1
Depends: libc6 (>= 2.25), debconf (>= 0.5) | debconf-2.0
Breaks: isync (<= 1.3.0-1build1), python-boto (<= 2.44.0-1ubuntu2), python-httplib2 (<= 0.9.2+dfsg-1), python-imaplib2 (<= 2.57-1), python3-boto (<= 2.44.0-1ubuntu2), python3-imaplib2 (<= 2.57-1)
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Homepage: https://www.openssl.org/
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>




As a temporary workaround we did a rollback to the older version:
Package: libssl1.1
Status: install ok installed
Priority: important
Section: libs
Installed-Size: 3412
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Architecture: amd64
Multi-Arch: same
Source: openssl
Version: 1.1.0g-2ubuntu4.3
Depends: libc6 (>= 2.14), debconf (>= 0.5) | debconf-2.0
Breaks: salt-common (<= 2016.3.3+ds-3)
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
Homepage: https://www.openssl.org/
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>




Do you have any suggestions so far?




Kind regards,
Patrick






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20190617/2a08db00/attachment.htm>