Re: lib/46878: connection to some https site using openssl causes freeze

[Ryo ONODERA <ryo_on%yk.rim.or.jp@localhost>]

The following reply was made to PR lib/46878; it has been noted by GNATS.

From: Ryo ONODERA <ryo_on%yk.rim.or.jp@localhost>
To: gnats-bugs%NetBSD.org@localhost, veego%NetBSD.org@localhost
Cc: 
Subject: Re: lib/46878: connection to some https site using openssl causes
 freeze
Date: Tue, 02 Oct 2012 12:09:03 +0900 (JST)

 From: Bernd Ernesti <veego%NetBSD.org@localhost>, Date: Mon,  1 Oct 2012 
19:35:04 +0000 (UTC)
 
 > The following reply was made to PR lib/46878; it has been noted by GNATS.
 > 
 > From: Bernd Ernesti <veego%NetBSD.org@localhost>
 > To: gnats-bugs%NetBSD.org@localhost
 > Cc: 
 > Subject: Re: lib/46878: connection to some https site using openssl causes
 >  freeze
 > Date: Mon, 1 Oct 2012 21:29:03 +0200
 > 
 >  On Mon, Oct 01, 2012 at 03:45:01PM +0000, Ryo ONODERA wrote:
 >  >  Hi,
 >  >  
 >  >  I have found that similar patch is used in Ubuntu Linux.
 >  >  
 >  >  Is this patch unacceptable?
 >  
 >  For me it would be unacceptable because it disables TLS 1.2.
 >  
 >  Is there no option for the openssl s_client to disable TLS 1.2?
 >  
 >  If not then this should be reported to the openssl developers
 >  so they can add an option to disable that with an command
 >  line option.
 
 openssl s_client is one example.
 At least, pkgsrc/www/w3m and net/nicovideo-dl are also affected.
 On NetBSD current and 6.0_RC2, pkgsrc/net/nicovideo-dl does not
 work at all, because it cannot connect to secure.nicovideo.jp .
 
 --
 Ryo ONODERA // ryo_on%yk.rim.or.jp@localhost
 PGP fingerprint = 82A2 DC91 76E0 A10A 8ABB  FD1B F404 27FA C7D1 15F3