[openssl-dev] [openssl.org #3851] bug report; error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Andy Polyakov via RT rt at openssl.org
Wed May 20 09:14:38 UTC 2015


> 1) They are "not" two different platforms, merely same command executed for 2 different versions of openssl.. please see attachment 1 below. It is possible that 1.0.2a was configured use config where openssl picked defaults and 0.9.8g was build using "./Configure solaris-x86-cc" 

Attachment 1 indicates that you execute on SPARC. At the same time you
keep mentioning configuration for solaris-x86-cc. In normal situation
it's interpreted as two platforms.

> 2) I rebuilt 1.0.2a using "./Configure solaris-x86-cc" please see attachment 2 showing " platform: solaris-x86-cc " (which I had done before as well)... and executed the program, resulting in same ssl errors on server side (05-19 09:48:44.427 SSLERR: SSL_connect/accept problem > error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record), and on client side (05-19 09:48:44.444 SSLERR: SSL_connect > error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record mac)

If you force x86 configuration on SPARC, no guarantees can be provided.
Even if it happens to work in some particular case. It just makes no
sense to spend time thinking about it.




More information about the openssl-dev mailing list