Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )

From	<tomas@tuxteam.de>
Newsgroups	linux.debian.user
Subject	Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )
Date	2017-09-06 10:00 +0200
Message-ID	<umDpF-6TS-21@gated-at.bofh.it> (permalink)
References	(1 earlier) <ueJLA-1Ix-11@gated-at.bofh.it> <umq93-5S4-1@gated-at.bofh.it> <umqC6-6kM-3@gated-at.bofh.it> <umrRv-76q-7@gated-at.bofh.it> <umtTk-8sT-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Sep 05, 2017 at 11:40:46PM +0200, Sven Hartge wrote:
> Michael Grant <mgrant@grant.org> wrote:
> 
> > Is there something I can set on Debian side to force this newer
> > openssl to accept older 1.x connections?
> 
> No, you can't.
> 
> Kurt Roeckx, the DD maintaining OpenSSL, patched it in such a way that a
> program needs to call a special function of OpenSSL to override the
> default minimum TLS-version of TLS1.2.
> 
> Problem is: next to no program implements this as of yet.

Isn't there any LD_PRELOAD [1] [2] [3] trick one could play? I mean
interposing something between the executable and the lib to slightly
modify the lib's default behaviour?

Sorry, I haven't the spare cycles ATM to give it a shot (although it
would be tempting...)

[1] http://www.catonmat.net/blog/simple-ld-preload-tutorial/
[2] https://rafalcieslak.wordpress.com/2013/04/02/dynamic-linker-tricks-using-ld_preload-to-cheat-inject-features-and-investigate-programs/
[3] http://www.linuxjournal.com/article/7795

- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlmvqlUACgkQBcgs9XrR2kZ+pQCeN8zhZhk77lZTpY1ObE/7x0RC
5V8AniopvriAqZjMwNTS2olo2dnlciS/
=qa6N
-----END PGP SIGNATURE-----

Thread

testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-08-14 14:10 +0200
  Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Stephan Seitz <stse+debian@fsing.rootsland.net> - 2017-08-14 15:20 +0200
    Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) kjonca@poczta.onet.pl (Kamil Jońca) - 2017-08-14 21:50 +0200
      Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-08-14 22:50 +0200
        Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) kjonca@poczta.onet.pl (Kamil Jońca) - 2017-08-15 09:30 +0200
    Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-08-15 15:10 +0200
      Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 19:50 +0200
        Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Gene Heskett <gheskett@shentel.net> - 2017-09-05 20:20 +0200
          Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 21:40 +0200
            Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 23:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-06 11:10 +0200
            Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-05 23:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-06 00:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-09-06 02:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-06 10:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-06 17:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-06 21:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-07 16:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-08 00:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-08 09:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 09:50 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-08 11:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-08 18:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 09:40 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Brian <ad44@cityscape.co.uk> - 2017-09-08 20:20 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 22:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-08 11:10 +0200

csiph-web