You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
eea3a9625c
This adds patches to avoid possible application breakage caused by a
change in behavior introduced in 1.1.1e. It affects at least nginx,
which logs error messages such as:
nginx[16652]: [crit] 16675#0: *358 SSL_read() failed (SSL: error:
4095126:SSL routines:ssl3_read_n:unexpected eof while reading) while
keepalive, client: xxxx, server: [::]:443
Openssl commits db943f4 (Detect EOF while reading in libssl), and
22623e0 (Teach more BIOs how to handle BIO_CTRL_EOF) changed the
behavior when encountering an EOF in SSL_read(). Previous behavior was
to return SSL_ERROR_SYSCALL, but errno would still be 0. The commits
being reverted changed it to SSL_ERRO_SSL, and add an error to the
stack, which is correct. Unfortunately this affects a number of
applications that counted on the old behavior, including nginx.
The reversion was discussed in openssl/openssl#11378, and implemented as
PR openssl/openssl#11400.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit
|
4 years ago | |
|---|---|---|
| .. | ||
| argp-standalone | 6 years ago | |
| elfutils | 5 years ago | |
| gettext | 7 years ago | |
| gettext-full | 5 years ago | |
| gmp | 5 years ago | |
| libbsd | 5 years ago | |
| libconfig | 5 years ago | |
| libevent2 | 5 years ago | |
| libiconv | 7 years ago | |
| libiconv-full | 5 years ago | |
| libjson-c | 5 years ago | |
| libmnl | 5 years ago | |
| libnetfilter-conntrack | 5 years ago | |
| libnetfilter-cthelper | 5 years ago | |
| libnetfilter-cttimeout | 5 years ago | |
| libnetfilter-log | 5 years ago | |
| libnetfilter-queue | 5 years ago | |
| libnfnetlink | 5 years ago | |
| libnftnl | 5 years ago | |
| libnl | 5 years ago | |
| libnl-tiny | 7 years ago | |
| libpcap | 5 years ago | |
| libroxml | 5 years ago | |
| libtool | 5 years ago | |
| libubox | 4 years ago | |
| libunwind | 5 years ago | |
| libusb | 5 years ago | |
| libusb-compat | 5 years ago | |
| lzo | 5 years ago | |
| mbedtls | 4 years ago | |
| ncurses | 5 years ago | |
| nettle | 5 years ago | |
| nghttp2 | 5 years ago | |
| openssl | 4 years ago | |
| popt | 5 years ago | |
| readline | 5 years ago | |
| sysfsutils | 5 years ago | |
| toolchain | 5 years ago | |
| uclibc++ | 5 years ago | |
| uclient | 5 years ago | |
| ustream-ssl | 5 years ago | |
| wolfssl | 4 years ago | |
| zlib | 5 years ago | |