From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Testing report for Core Update 120
Date: Tue, 24 Apr 2018 12:59:02 +0100
Message-ID: <1524571142.2246848.53.camel@ipfire.org>
In-Reply-To: <1da9c33c-c022-ec87-cf16-c3e7d114c3a2@link38.eu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============5849533493191693672=="
List-Id: <development.lists.ipfire.org>

--===============5849533493191693672==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Thank you for your feedback.

The only thing I had on my list as a blocker was dma segfaulting (https://bug=
zil
la.ipfire.org/show_bug.cgi?id=3D11701).

So far I suppose we might release next week.

Best,
-Michael

On Fri, 2018-04-20 at 19:06 +0200, Peter M=C3=BCller wrote:
> Hello,
>=20
> I installed Core Update 120 on one machine and performed a reboot. So
> far, I am able to report the following:
>=20
> Squid		works
> IDS		works
> IPsec VPN	works (except #11688)
> OpenVPN VPN	works (no TLS 1.2 tested, yet)
> OpenSSH		works
> WebUI		works
>=20
> OpenSSL also uses new default cipher list and provides Chacha/Poly.
>=20
> However, NRPE does not work anymore, clients are unable to establish a
> SSL connection to the server listening on port 5666:
>=20
> Apr 20 18:53:09 firewall nrpe[9756]: Error: Could not complete SSL
> handshake. 1
>=20
> I guess this is related to OpenSSL 1.1, but I am not sure. strace does
> not show anything very helpful:
>=20
> > [pid 13832] <... close resumed> )       =3D 0
> > [pid 13831] <... munmap resumed> )      =3D 0
> > [pid 13832] getpeername(5, {sa_family=3DAF_INET, sin_port=3Dhtons(54200),
> > sin_addr=3Dinet_addr("10.71.204.3")}, [16]) =3D 0
> > [pid 13832] rt_sigaction(SIGALRM, {0x403350, [ALRM], SA_RESTORER|SA_RESTA=
RT,
> > 0x67c135cf22e0}, {SIG_DFL, [], 0}, 8) =3D 0
> > [pid 13831] exit_group(0)               =3D ?
> > [pid 13832] alarm(300)                  =3D 0
> > [pid 13831] +++ exited with 0 +++
> > [pid 13819] <... wait4 resumed> NULL, 0, NULL) =3D 13831
> > [pid 13819] --- SIGCHLD {si_signo=3DSIGCHLD, si_code=3DCLD_EXITED, si_pid=
=3D13831,
> > si_status=3D0, si_utime=3D0, si_stime=3D0} ---
> > [pid 13819] select(5, [4], NULL, [4], {0, 500000} <unfinished ...>
> > [pid 13832] read(5, "\26\3\1\0r", 5)    =3D 5
> > [pid 13832] read(5, "\1\0\0n\3\3\321C\211\335\36\265\231wV\242\234\7\314T=
m|-
> > \367\210\200\310y\233\363?^"..., 114) =3D 114
> > [pid 13832] getpid()                    =3D 13832
> > [pid 13832] write(5, "\25\3\3\0\2\2(", 7) =3D 7
> > [pid 13832] getpid()                    =3D 13832
> > [pid 13832] sendto(3, "<27>Apr 20 18:56:20 nrpe[13832]:"..., 76,
> > MSG_NOSIGNAL, NULL, 0) =3D 76
> > [pid 13832] close(5)                    =3D 0
> > [pid 13832] munmap(0x67c13567b000, 2187664) =3D 0
> > [pid 13832] exit_group(0)               =3D ?
> > [pid 13832] +++ exited with 0 +++
>=20
> Any ideas?
>=20
> Best regards,
> Peter M=C3=BCller

--===============5849533493191693672==--