Closed jvehent closed 9 years ago
I tried to rebuild openssl with ./config && make depend && make
and the same problem occur. I'm going to try with upstream openssl next.
Upstream openssl doesn't have the issue. Testing with both the latest from master and the latest from 1.0.2.
$ ./openssl s_client -connect google.com:443 -cipher 'ECDHE-RSA-AES256-SHA384' 2>&1 <<<Q|grep 'ticket lifetime'
TLS session ticket lifetime hint: 100800 (seconds)
$ ./openssl version -a
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
OpenSSL 1.1.0-dev xx XXX xxxx
built on: reproducible build, date unspecified
platform: linux-x86_64
options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -Wall -O3 -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
OPENSSLDIR: "/usr/local/ssl"
$ ./openssl s_client -connect google.com:443 -cipher 'ECDHE-RSA-AES256-SHA384' 2>&1 <<<Q|grep 'ticket lifetime'
TLS session ticket lifetime hint: 100800 (seconds)
$ ./openssl version -a
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
OpenSSL 1.0.2b-dev xx XXX xxxx
built on: reproducible build, date unspecified
platform: linux-x86_64
options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
OPENSSLDIR: "/usr/local/ssl"
@jvehent , thanks for reporting this issue. I'm going to look into it.
Bug confirmed - it has to do with non-standard AEAD code. I'm in the process of removing those parts, as they are difficult and error-prone to maintain. This will take some while. Currently I'm testing a workaround for the issue
@jvehent , could you test the latest build (0611a8416a2dfd04dc343e0d3754ff6e89bdccb3 ) ? Sorry for the inconvenience. Later on I will remove all non-standard AEAD code.
I noticed a strange behavior in cipherscan's output: ticket hints always fail with cipher ECDHE-RSA-AES256-SHA384 since I upgraded the openssl binary last week. It may be an error in the build options I used, or a bug in upstream openssl. I figured I'd file here first for verification before escalating to openssl.
Custom build with AES128-SHA: ticket lifetime found
Custom build with ECDHE-RSA-AES256-SHA384: no ticket lifetime found
Stock Fedora21 build with ECDHE-RSA-AES256-SHA384: ticket lifetime found
Custom build version & options:
Stock fedora 21 build version & options: