Re: lib/46878: connection to some https site using opensslcausesfreeze

[Izumi Tsutsui <tsutsui%ceres.dti.ne.jp@localhost>]

The following reply was made to PR lib/46878; it has been noted by GNATS.

From: Izumi Tsutsui <tsutsui%ceres.dti.ne.jp@localhost>
To: martin%duskware.de@localhost, gnats-bugs%NetBSD.org@localhost
Cc: tsutsui%ceres.dti.ne.jp@localhost
Subject: Re: lib/46878: connection to some https site using opensslcausesfreeze
Date: Wed, 3 Oct 2012 22:21:50 +0900

 >  This sounds like an upstream interoperability problem - has it been
 >  reported there?
 
 The actual problem is "broken servers" that can't handle
 TLS 1.2 properly and openssl guys know the issue:
 http://nxr.NetBSD.org/xref/src/crypto/external/bsd/openssl/dist/CHANGES#60
 but I'm not sure if they think it's worth to make the workarounds
 runtime settings. (someone may just claim "fix broken ones.")
 
 ---
 Izumi Tsutsui