• Bug#1102957: [Pkg-openssl-devel] Bug#1102957: Bug#1102957: geventhttpcl

    From Sebastian Andrzej Siewior@21:1/5 to To Chris Hofstaedtler on Tue May 13 22:00:01 2025
    Control: reassign -1 geventhttpclient
    Control: tags -1 patch upstream

    On 2025-05-04 21:46:06 [+0200], To Chris Hofstaedtler wrote:
    On 2025-04-30 15:26:54 [+0200], Chris Hofstaedtler wrote:
    Control: reassign -1 libssl3t64
    Control: affects -1 src:geventhttpclient

    Unsurprisingly this is caused by libssl. debbisect points to:

    I'm pretty busy the upcomming week so I won't be able to take a look. So
    far this is the only bug reported against openssl 3.5 vs 3.4…

    turns out openssl is innocent. A patch is attached.

    Chris

    Sebastian

    From: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
    Date: Tue, 13 May 2025 21:34:01 +0200
    Subject: [PATCH] test: Increase the read of the TLS handshake in
    sni_checker_server()

    If only the first 1KiB of the TLS packet is read then there should be no surprise if things don't work out if something changes.
    Newer openssl stuffs more bytes into the handshake so the test failed.

    Read 4KiB now and hope of the best.

    Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
    ---
    tests/test_ssl.py | 2 +-
    1 files changed, 1 insertion(+), 1 deletion(-)

    diff --git a/tests/test_ssl.py b/tests/test_ssl.py
    index 58f4190af67b..1c6842358325 100644
    --- a/tests/test_ssl.py
    +++ b/tests/test_ssl.py
    @@ -164,7 +164,7 @@ CERT = os.path.join(BASEDIR, "server.crt")
    def run(sock):
    while True:
    conn, addr = sock.accept()
    - client_hello = conn.recv(1024)
    + client_hello = conn.recv(4096)
    return extract_sni_from_client_hello(client_hello)

    def extract_sni_from_client_hello(hello_packet):
    --
    2.49.0

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)