[ipxe-devel] Ubuntu 18.04 libssl1.1 TLS 0x33444

[Geert Stappers]

On 17-06-2019 14:46, mail at localhorst.es wrote:

> ​Dear experts,
>
> after I updated the libssl1.1 package from the official Ubuntu 18.04
> repository, iPXE is unable to connect to the Apache webserver over SSL.
>
> The error messages:
> ipxe: TLS 0x33444 received overlength Handshake
> ipxe: Download of "default.ipxe" failed: Invalid argument
> (http://ipxe.org/1c0de802)
>
> iPXE is compiled with the following command:
> make DEBUG=tls,x509,ocsp bin/undionly.kpxe TRUST=certs.pem
>
> libssl1.1 package information (dpkg -s libssl1.1):
> Package: libssl1.1
> Status: install ok installed
> Priority: important
> Section: libs
> Installed-Size: 3914
> Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
> Architecture: amd64
> Multi-Arch: same
> Source: openssl
> Version: 1.1.1-1ubuntu2.1~18.04.1
> Depends: libc6 (>= 2.25), debconf (>= 0.5) | debconf-2.0
> Breaks: isync (<= 1.3.0-1build1), python-boto (<= 2.44.0-1ubuntu2),
> python-httplib2 (<= 0.9.2+dfsg-1), python-imaplib2 (<= 2.57-1),
> python3-boto (<= 2.44.0-1ubuntu2), python3-imaplib2 (<= 2.57-1)
> Description: Secure Sockets Layer toolkit - shared libraries
>  This package is part of the OpenSSL project's implementation of the SSL
>  and TLS cryptographic protocols for secure communication over the
>  Internet.
>  .
>  It provides the libssl and libcrypto shared libraries.
> Homepage: https://www.openssl.org/
> Original-Maintainer: Debian OpenSSL Team
> <pkg-openssl-devel at lists.alioth.debian.org>
>
>
> As a temporary workaround we did a rollback to the older version:
> Package: libssl1.1
> Status: install ok installed
> Priority: important
> Section: libs
> Installed-Size: 3412
> Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
> Architecture: amd64
> Multi-Arch: same
> Source: openssl
> Version: 1.1.0g-2ubuntu4.3
> Depends: libc6 (>= 2.14), debconf (>= 0.5) | debconf-2.0
> Breaks: salt-common (<= 2016.3.3+ds-3)
> Description: Secure Sockets Layer toolkit - shared libraries
>  This package is part of the OpenSSL project's implementation of the SSL
>  and TLS cryptographic protocols for secure communication over the
>  Internet.
>  .
>  It provides the libssl and libcrypto shared libraries.
> Homepage: https://www.openssl.org/
> Original-Maintainer: Debian OpenSSL Team
> <pkg-openssl-devel at lists.alioth.debian.org>
>
>
> Do you have any suggestions so far?
>
My suggestion is to tell more about server side.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20190618/58d59683/attachment.htm>