Bug 2088363 - tcltls broken on F36/openssl3.0
Summary: tcltls broken on F36/openssl3.0
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: tcltls
Version: 36
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Robert Scheck
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-05-19 09:59 UTC by Ralf Ertzinger
Modified: 2022-06-06 02:29 UTC (History)
2 users (show)

Fixed In Version: tcltls-1.7.22-6.fc36 tcltls-1.7.22-6.fc34 tcltls-1.7.22-6.fc35
Clone Of:
Environment:
Last Closed: 2022-06-06 02:11:10 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
packet capture from a F36 system running the HTTPS example code (1.74 KB, application/vnd.tcpdump.pcap)
2022-05-19 09:59 UTC, Ralf Ertzinger
no flags Details

Description Ralf Ertzinger 2022-05-19 09:59:43 UTC
Created attachment 1881276 [details]
packet capture from a F36 system running the HTTPS example code

Description of problem:
Using tcltls on F36 with openssl 3.0 produces garbage on the wire, causing handshakes to fail.


Version-Release number of selected component (if applicable):
tcltls-1.7.22-5.fc36

How reproducible:
Always

Steps to Reproduce:
Using the example from https://core.tcl-lang.org/tcltls/wiki?name=Documentation#HTTPS%20EXAMPLE in tclsh:

On a F35 system:
% package require http
2.9.1
% package require tls
1.7.22
% http::register https 443 [list ::tls::socket -autoservername true -require true -cadir /etc/ssl/certs]
443 {::tls::socket -autoservername true -require true -cadir /etc/ssl/certs}
% set tok [http::geturl https://www.tcl.tk/]
::http::1



On a F36 system:
% package require http
2.9.5
% package require tls
1.7.22
% http::register https 443 [list ::tls::socket -autoservername true -require true -cadir /etc/ssl/certs]
443 {::tls::socket -autoservername true -require true -cadir /etc/ssl/certs}
% set tok [http::geturl https://www.tcl.tk/]
failed to use socket



Looking at a packet capture, whatever goes out on the wire does not look like a TLS handshake. A TLS handshake should start with 0x16 (CLIENT HELLO), the data sent by tcltls on F36 starts with 0x01. A pcap is attached.

Comment 1 Fedora Update System 2022-05-28 20:54:31 UTC
FEDORA-2022-04b9b8ad57 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2022-04b9b8ad57

Comment 2 Fedora Update System 2022-05-28 20:54:33 UTC
FEDORA-2022-1e268c4a41 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e268c4a41

Comment 3 Fedora Update System 2022-05-29 01:47:29 UTC
FEDORA-2022-04b9b8ad57 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-04b9b8ad57`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-04b9b8ad57

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2022-05-29 02:11:56 UTC
FEDORA-2022-1e268c4a41 has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-1e268c4a41`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e268c4a41

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2022-05-29 02:40:05 UTC
FEDORA-2022-7db3dd69a4 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-7db3dd69a4`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-7db3dd69a4

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2022-06-06 02:11:10 UTC
FEDORA-2022-7db3dd69a4 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 7 Fedora Update System 2022-06-06 02:19:35 UTC
FEDORA-2022-04b9b8ad57 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2022-06-06 02:29:17 UTC
FEDORA-2022-1e268c4a41 has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.