Re: lib/46878: connection to some https site using openssl causesfreeze

[Ryo ONODERA <ryo_on%yk.rim.or.jp@localhost>]

The following reply was made to PR lib/46878; it has been noted by GNATS.

From: Ryo ONODERA <ryo_on%yk.rim.or.jp@localhost>
To: gnats-bugs%NetBSD.org@localhost, tsutsui%ceres.dti.ne.jp@localhost
Cc: 
Subject: Re: lib/46878: connection to some https site using openssl
 causesfreeze
Date: Wed, 03 Oct 2012 04:18:49 +0900 (JST)

 From: Ryo ONODERA <ryo_on%yk.rim.or.jp@localhost>, Date: Wed, 03 Oct 2012 
01:16:16 +0900 (JST)
 
 >>  And 1.0.1d (newer than our 1.0.1c) includes the following entry:
 >>  ---
 >>   Changes between 1.0.1c and 1.0.1d [xx XXX xxxx]
 >>     :
 >>    *) Don't use TLS 1.0 record version number in initial client hello
 >>       if renegotiating.
 >>  ---
 >>  
 >>  Could you try this renegotiation change?
 >>  (I have not checked actuall changes though)
 > 
 > I will try to use OpenSSL 1.0.1d.
 > 
 > Thank you, again.
 
 I have tested with openssl-1.0.1-stable-SNAP-20121002.tar.gz
 (OpenSSL 1.0.1d-dev).
 And I cannot connect to the servers.
 
 --
 Ryo ONODERA // ryo_on%yk.rim.or.jp@localhost
 PGP fingerprint = 82A2 DC91 76E0 A10A 8ABB  FD1B F404 27FA C7D1 15F3