[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SSL error: decryption failed or bad record mac : more clues

From: Ed Zaron <ezaron_at_coas.oregonstate.edu>
Date: 2006-03-16 09:01:42 CET

Hi Jonathan,

I looked at the the kerberos thread you mentioned below. I have had some
problems with dynamic libraries for some Darwinports builds, e.g.,
openssh, and I wonder if this could be related. (Although, it is weird
that this error is related to the size of the import. It seems like a
dylib problem would break the executable completely.)

Anyway, I uninstalled and cleaned out the whole chain of dependencies
back to zlib and libiconv (subversion, apache2, apr, apr-util, neon,
expat, mod_python, libssl, openssl, zlib, libiconv), and then rebuilt
subversion. Before that, I had tried reverting to older versions to no
avail. (Yes, I restarted the httpd -D SSL deamons between each
reversion/build). I still get exactly the same error.

But ... now Darwinports can build openssh without a conflict between
symbols from dylibs in /opt/local and /usr/local. Unfortunately, I don't
know if the openssh portfile had changed between my previous,
unsuccessful, attempts to build openssh and today's attempt.

I will post more details tomorrow, when I get back to a computer that
alllows me to cut and paste from a terminal window and the email
program. I'll also start cross-posting to the darwinports list.

This is so strange, because I have been using subversion for over a year
without seeing this problem, even with large projects/working copies.


Jonathan Williams wrote:

> Hi Ed!
> On Mar 15, 2006, at 5:30 PM, Ed Zaron wrote:
>> I am having the same problem described in a couple of archived posts
>> from last year. I wonder if there is any more information or a
>> solution? The error message is in the subject line.
>> I had never encountered this problem before, but I recently made
>> some upgrades using Darwinports:
>> (I am running Apple OS X 10.3.9; gcc 3.3 20030304)
> Just wanted to chime in and mention that I am having the exact same
> problem on Mac OS X 10.4.5 (intel) with all my packages built from
> Darwinports as well.
> I recently had an issue with Darwinports Apache having issues with
> loading both DP and Apple Kerberos libraries (detailed in this
> thread: http://mailman.mit.edu/pipermail/kerberos/2006-March/
> 009406.html). I wonder if the issue is similar.
>> Also, I recently updated my self-signed certificate. I have a
>> dynamic IP address, which is usually unchanged, but whenever an
>> extended power outage occurred in my building, I would get a new IP
>> address and have to switch all of my working copies to point to the
>> new repo address. This caused problems with some windows svn
>> clients, which blocked connections to my https site because my
>> actual IP address and hostname did not match what was in my secure
>> certificates.
> I wouldn't worry about this causing the problem.
> What I would suggest is that someone with a know good apache+ssl
> server contact Ed and/or myself to arrange to try our clients out on
> a large svn import to it. The process should be also done for our
> Apache SSL servers with a known good client. We need to figure out
> where the problem is originating.
> Any takers?
> --
> Jonathan C. Williams
> Web Programmer
> Steinhardt School of Education
> jonathan.williams@nyu.edu :: 212-998-5308

To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Mar 16 09:02:56 2006

This is an archived mail posted to the Subversion Users mailing list.