Re: [gentoo-user] SSL giving corrupted MAC on input

[Paul Colquhoun <paulcol@andor.dropbear.id.au>]

On Tue, 7 Jul 2009 02:31:38 Simon wrote:
> Hi there!
>   I'm getting this issue where even very small transfers through ssh
> will cause this error message:  Corrupted MAC on input.  I've done my
> homework and found out this is not necessarily related to the network
> hardware as TCP would retransmit such corrupted packets, moreover the
> error message is clearly related to ssh as googling proves this.
>
>   A quick troubleshooting i've done was to setup apache and simply
> wget a very large file over plain HTTP.  Transfer worked, i did it a
> second time and diff'ed the two downloads, they were the same.  I then
> did the same test over HTTPS and got an error
> (SSL3_GET_RECORD:decryption failed or bad record mac). This clarified
> the problem is much more related to SSL than anything else.
>
>   A quick glance at `emerge -vp openssl` showed an issue:  it had been
> compiled with sse2 support while this computer's cpu didnt support
> that.  Changed use flags and recompiled, restarted ssh and apache.
> They both continued giving the same error.  I finally rebooted the
> machine, in case, but same issue still...  The only use flag for
> openssl now is zlib.


What did you recompile?  There may still be a library using the "sse2" flag.

Have you tried using the "--newuse" or "--reinstall changed-use" emerge flags?


-- 
Reverend Paul Colquhoun, ULC.    http://andor.dropbear.id.au/~paulcol
 Before you criticize someone, you should walk a mile in their shoes.
Then, when you do, you'll be a mile away, and you'll have their shoes.