From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MNr6U-0000vP-3Q for garchives@archives.gentoo.org; Mon, 06 Jul 2009 16:31:42 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 92826E0465; Mon, 6 Jul 2009 16:31:40 +0000 (UTC) Received: from mail-yx0-f191.google.com (mail-yx0-f191.google.com [209.85.210.191]) by pigeon.gentoo.org (Postfix) with ESMTP id 78036E0465 for ; Mon, 6 Jul 2009 16:31:40 +0000 (UTC) Received: by yxe29 with SMTP id 29so5883703yxe.32 for ; Mon, 06 Jul 2009 09:31:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:date:message-id :subject:from:to:content-type:content-transfer-encoding; bh=9Vli4tofeKUJCHdj5625y0Ugg8a/O7FiTO7uQnRhKIw=; b=chnBKsXZHajZFFSlQ0JCB+DFSmCULFqimkZJxyojLPJKb6Mgmv+HSNziAipq2J/MsR HFzbBtm/KWljFD+HbVNiQTuwK5nfbU3aDvwak5eUsKOVG7g3ox/gAdSug5Ysm9D2MJ70 HxUD8h+Z+CS74MhGxnS/rlDLaIhIQvKEDdVkI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=eIuw/MPxmdkLwgLISBYtR2GrnOzKeH6abB7A86EE+G7SBki2gR58dKSt1UiYBQlWCR dWLkj0OtKcppOQcw4onJ1ndFTKC3Hy3k6Zv5vUoWtYfxRnHvIUU2G2KR3JWgyREBnlGJ jUWrQ1iiFILELGHMaJ2zr7xTz04qJ0cyYL9Hc= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.100.4.8 with SMTP id 8mr8538316and.180.1246897898539; Mon, 06 Jul 2009 09:31:38 -0700 (PDT) Date: Mon, 6 Jul 2009 12:31:38 -0400 Message-ID: <5f14cf5e0907060931l2b59bc8pc0c53e6c3a569790@mail.gmail.com> Subject: [gentoo-user] SSL giving corrupted MAC on input From: Simon To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 38dc2c50-7759-4207-a9ee-f53a5c6be8b1 X-Archives-Hash: 78fbcf0146896ece41c133167940a84f Hi there! I'm getting this issue where even very small transfers through ssh will cause this error message: Corrupted MAC on input. I've done my homework and found out this is not necessarily related to the network hardware as TCP would retransmit such corrupted packets, moreover the error message is clearly related to ssh as googling proves this. A quick troubleshooting i've done was to setup apache and simply wget a very large file over plain HTTP. Transfer worked, i did it a second time and diff'ed the two downloads, they were the same. I then did the same test over HTTPS and got an error (SSL3_GET_RECORD:decryption failed or bad record mac). This clarified the problem is much more related to SSL than anything else. A quick glance at `emerge -vp openssl` showed an issue: it had been compiled with sse2 support while this computer's cpu didnt support that. Changed use flags and recompiled, restarted ssh and apache. They both continued giving the same error. I finally rebooted the machine, in case, but same issue still... The only use flag for openssl now is zlib. What is also pretty strange about the issue, is i haven't touched the kernel in a long time and i usually do all my gentoo updates on monday. The problem must have happened since last monday's updates, but i dont monitor those very much, all i care is everything went fine and that revdep-rebuild says i'm good to go. I've done many emerges since then so i cant figure out a way to see what has been updated recently. A bit of background: That PC runs kernel 2.6.24, it's my slowest pc (used for backups mostly) P3 @ 450Mhz, it's got 128MB of ram. Some programes have been unmasked, but none that have any relationship with openssl are, everything dealing with that is stable. Doing `find /usr/portage/distfiles -ctime -10` (should give me the files downloaded within last 10 days, right?) it shows a few files but glibc is the only that i can see has relationship with issue... Anyone can help troubleshoot some more?