Re: decryption failed or bad record mac (was: tlsv1 alert decrypt error)

2017-03-07 Thread Kirill Miazine
* Kirill Miazine [2017-03-07 10:41]: [...] 28 Feb snapshot: ACCEPT_SR_KEY_EXCH:tlsv1 alert decrypt error Today's snapshot: ACCEPT_SR_CERT_VRFY:decryption failed or bad record mac it is fixed in the most recent snapshot. email from paypal arrived promptly. thanks!

Re: decryption failed or bad record mac (was: tlsv1 alert decrypt error)

2017-03-07 Thread Kirill Miazine
* Kirill Miazine [2017-03-07 00:35]: Thanks for moving the thread to the correct place! * Bob Beck [2017-03-06 15:49]: And as joel mentioned, a fix is already arriving for this - there was a bug in SSLv2 compatible handshake initiation, Joel sent me a patch which appeared here: http://cvsweb

decryption failed or bad record mac (was: tlsv1 alert decrypt error)

2017-03-06 Thread Kirill Miazine
Thanks for moving the thread to the correct place! * Bob Beck [2017-03-06 15:49]: And as joel mentioned, a fix is already arriving for this - there was a bug in SSLv2 compatible handshake initiation, Joel sent me a patch which appeared here: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/li

Re: tlsv1 alert decrypt error

2017-03-06 Thread Bob Beck
And as joel mentioned, a fix is already arriving for this - there was a bug in SSLv2 compatible handshake initiation, and Paypal still has it enabled... (yeeuch) On Mon, Mar 6, 2017 at 3:48 PM, Bob Beck wrote: > > Move it to tech@ from misc.. not libressl.. libressl is not special ;) > > On

Re: tlsv1 alert decrypt error

2017-03-06 Thread Bob Beck
Move it to tech@ from misc.. not libressl.. libressl is not special ;) On Mon, Mar 6, 2017 at 3:21 PM, Kirill Miazine wrote: > Moving to libressl@ from misc@, as it's a LibreSSL issue. > > * Joel Sing [2017-03-05 23:01]: > > On Thursday 02 March 2017 13:28:08 Kirill Miazine wrote: >> >>> Recentl