Re: SSL error: decryption failed or bad record mac : more clues

[Ed Zaron <ez...@coas.oregonstate.edu>]

Hi Jonathan,

I looked at the the kerberos thread you mentioned below. I have had some 
problems with dynamic libraries for some Darwinports builds, e.g., 
openssh, and I wonder if this could be related. (Although, it is weird 
that this error is related to the size of the import. It seems like a 
dylib problem would break the executable completely.)

Anyway, I uninstalled and cleaned out the whole chain of dependencies 
back to zlib and libiconv (subversion, apache2, apr, apr-util, neon, 
expat, mod_python, libssl, openssl, zlib, libiconv), and then rebuilt 
subversion. Before that, I had tried reverting to older versions to no 
avail. (Yes, I restarted the httpd -D SSL deamons between each 
reversion/build). I still get exactly the same error.

But ... now Darwinports can build openssh without a conflict between 
symbols from dylibs in /opt/local and /usr/local. Unfortunately, I don't 
know if the openssh portfile had changed between my previous, 
unsuccessful, attempts to build openssh and today's attempt.

I will post more details tomorrow, when I get back to a computer that 
alllows me to cut and paste from a terminal window and the email 
program. I'll also start cross-posting to the darwinports list.

This is so strange, because I have been using subversion for over a year 
without seeing this problem, even with large projects/working copies.

-Ed


Jonathan Williams wrote:

> Hi Ed!
>
> On Mar 15, 2006, at 5:30 PM, Ed Zaron wrote:
>
>>
>> I am having the same problem described in a couple of archived  posts 
>> from last year. I wonder if there is any more information or  a 
>> solution? The error message is in the subject line.
>>
>> I had never encountered this problem before, but I recently made  
>> some upgrades using Darwinports:
>> (I am running Apple OS X 10.3.9; gcc 3.3 20030304)
>
>
>
> Just wanted to chime in and mention that I am having the exact same  
> problem on Mac OS X 10.4.5 (intel) with all my packages built from  
> Darwinports as well.
>
> I recently had an issue with Darwinports Apache having issues with  
> loading both DP and Apple Kerberos libraries (detailed in this  
> thread: http://mailman.mit.edu/pipermail/kerberos/2006-March/ 
> 009406.html). I wonder if the issue is similar.
>
>> Also, I recently updated my self-signed certificate. I have a  
>> dynamic IP address, which is usually unchanged, but whenever an  
>> extended power outage occurred in my building, I would get a new IP  
>> address and have to switch all of my working copies to point to the  
>> new repo address. This caused problems with some windows svn  
>> clients, which blocked connections to my https site because my  
>> actual IP address and hostname did not match what was in my secure  
>> certificates.
>
>
> I wouldn't worry about this causing the problem.
>
> What I would suggest is that someone with a know good apache+ssl  
> server contact Ed and/or myself to arrange to try our clients out on  
> a large svn import to it. The process should be also done for our  
> Apache SSL servers with a known good client. We need to figure out  
> where the problem is originating.
>
> Any takers?
>
> -- 
> Jonathan C. Williams
> Web Programmer
> Steinhardt School of Education
> jonathan.williams@nyu.edu :: 212-998-5308



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org