Hi Alessandro On Wed, Mar 21, 2012 at 11:39:20PM +0100, Alessandro Ghedini wrote: > On Wed, Mar 21, 2012 at 11:19:47PM +0100, Alessandro Ghedini wrote: > > On Wed, Mar 21, 2012 at 10:26:37PM +0100, Salvatore Bonaccorso wrote: > > > On Wed, Mar 21, 2012 at 09:02:54PM +0100, Salvatore Bonaccorso wrote: > > > > > t/dhe.t .................... > > > > > Failed 2/3 subtests > > > > > > In fact this one does not fail in a wheezy build with 1.42-1+b1. > > > > > > Okay to reassign this to libnet-ssleay-perl and add a affects > > > libio-socket-ssl-perl? > > > > I think it is an openssl-related thing. I can reproduce the failure > > with the latest libssl1.0.0 in sid (1.0.1-2) but not with the version > > 1.0.0h-1 and below. > > Also, having a look at the t/dhe.t file I read: > > > # openssl 1.0.1(beta2) complains about the rsa key too small, unless > > # we explicitly set version to tlsv1 or sslv3 > > # unfortunatly the workaround fails for older openssl versions :( > > I think that the version check below that comment is the cause: > removing it (but leaving the "SSL_version => 'tlsv1'") solves the > problem for me with libssl 1.0.1 (but would probably break with older > versions). > > Given that OPENSSL_VERSION_NUMBER is a macro, maybe simply rebuilding > libnet-ssleay-perl against the new libssl would solve the issue?
I looked into this now, and yes you should be right. When recompiling libnet-ssleay-perl against new openssl the issue dissapears then. We still have [1] open, but upstream RT contains discussion on resolving that. [1] http://bugs.debian.org/661566 Regards Salvatore
signature.asc
Description: Digital signature