Greetings,
This message has been automatically generated in response to the
creation of a trouble ticket regarding:
"BUG: OpenSSL 1.0.2 Solaris 32 bit build is broken",
a summary of which appears below.
There is no need to reply to this message right now. Your ticket has been
assigned an ID of [openssl.org #3804].
Please include the string:
[openssl.org #3804]
in the subject line of all future correspondence about this issue. To do so,
you may reply to this message.
Thank you,
rt at openssl.org
-------------------------------------------------------------------------
I have an application that runs quite happily using OpenSSL 1.0.1h on Solaris 32 bit. I want to upgrade but neither 1.0.2 nor 1.0.2a work.
Solaris 10
Solaris Studio 12.4
Make test log attached.
1 When building 1.0.2 using
./Configure solaris-sparcv9-cc no-shared -m32 -xcode=pic32 -xldscope=hidden
openssl s_client crashes on start:
-bash-3.00$ ./openssl s_client -connect eos.es.cpth.ie:4250
Segmentation Fault (core dumped)
-bash-3.00$ pstack core
core 'core' of 468: ./openssl s_client -connect eos.es.cpth.ie:4250
000e9ce8 sha1_block_data_order (2ed490, 2ed4ec, 4, ffbfebc0, ffbfebc4, 44) + 8
00226140 ssleay_rand_add (ffbfecbc, 1, 20, ffbfeb94, 0, 14) + 530
00227028 RAND_poll (4, ffbfeca8, ffbfecc8, ffbfecc8, 2c0630, 2c0624) + 38c
00226be0 ssleay_rand_status (c734, 0, 2b9f5c, 2c05ac, 2a0e50, 13000) + 138
00065eb4 app_RAND_load_file (ffbfefc0, 2d5218, 1, 2800, 0, 1) + 88
0004d784 s_client_main (0, c00, 0, c00, 2b4adc, 2f4380) + 5c94
0001328c do_cmd (2eb4c8, 3, ffbffa88, 2b4738, 13e64, 2b3e78) + b8
00012f08 main (4, ffbffa84, 2eb4c8, 2a0000, 2b3e78, 2b4adc) + 3a4
00012a08 _start (0, 0, 0, 0, 0, 2b3e78) + 108
2 So I then rebuilt adding no-asm flag. It manages to connect but negotiation fails with an error:
4280581268:error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record mac:s3_pkt.c:1456:SSL alert number 20
4280581268:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:
This is against the server that is still running 1.0.1h and can be successfully connected with openssl s_client built with 1.0.1h.
The 64 bit build seems to work perfectly. The 32 bit builds that we use on Windows and Linux also work perfectly.
1.0.2a build fails in the same way. gcc build fails in the same way.
I have built 1.0.1m with asm and that works fine.
Regards,
John.
