Re: Openssl errors on FreeBSD

From: Odhiambo Washington <odhiambo_at_gmail.com>
Date: Mon, 06 Nov 2023 08:46:34 UTC
On Mon, Nov 6, 2023 at 4:02 AM <iio7@tutanota.com> wrote:

> Hi,
>
> I have four machines in my office, 2 FreeBSD boxes, 1 OpenBSD box and 1
> Linux box. On my FreeBSD boxes I get openssl read errors on some different
> domains, such as:
>
> $ curl -O https://www.unixsheikh.com/includes/files/the-biggest-myths.pdf
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
> Current
>                                  Dload  Upload   Total   Spent    Left
> Speed
> 12  763k   12 98139    0     0   377k      0  0:00:02 --:--:--  0:00:02
> 378k
> curl: (56) OpenSSL SSL_read: OpenSSL/1.1.1t: error:1408F119:SSL
> routines:ssl3_get_record:decryption failed or bad record mac, errno 0
>
> I get the same with wget.
>
> I also have problems getting email and using SFTP:
>
> Email:
>
> ** IMAP error on mail.example.com: stream error
> ** IMAP connection broken
>
> SFTP:
>
> Status: Connecting to www.example. <http://www545.your-server.de>com...
> Status: Using username "foo".
> Command:        Pass: ****************
> Error:  FATAL ERROR: Incorrect MAC received on packet
> Error:  Could not connect to server
> Status: Waiting to retry...
>
> This is only a problem on the two FreeBSD boxes, not on the OpenBSD or the
> Linux box. All connected to the same network. The two FreeBSD boxes
> runs 13.2-RELEASE-p4.
>
> Is this a problem with openssl on FreeBSD or what am I looking at here?
>

[11:44 ~ ]$ openssl version
OpenSSL 1.1.1t-freebsd  7 Feb 2023
[11:45 ~ ]$ curl -O
https://www.unixsheikh.com/includes/files/the-biggest-myths.
                                                                     pdf
  % Total    % Received % Xferd  Average Speed   Time    Time     Time
 Current
                                 Dload  Upload   Total   Spent    Left
 Speed
100  763k  100  763k    0     0   443k      0  0:00:01  0:00:01 --:--:--
 443k
[11:45 ~ ]$ uname -a
FreeBSD gw 13.2-RELEASE-p4 FreeBSD 13.2-RELEASE-p4 GENERIC amd64

-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
[How to ask smart questions:
http://www.catb.org/~esr/faqs/smart-questions.html]