Re: Tor fails to build connections after FreeBSD security update

[Hans Schnehl <torvallenator@xxxxxxxxx>]

On Sat, Dec 05, 2009 at 11:39:33AM -0500, Andrew Lewman wrote:
> 
> Tor initiates a ssl renegotiate at the start of a circuit, the latest
> openssl breaks tor.  The fixes for this are currently in -alpha only.
> The 0.2.1.21-dev in git also contains the fix.  We're testing
> 0.2.2.6-alpha right now,
> https://blog.torproject.org/blog/tor-0226-alpha-released.  Please try
> 0.2.2.6-alpha and let us know if it works.

Tor version 0.2.2.6-alpha (git-1ee580407ccb9130) was where this started. 
That's the current from the official download page now and the one in
the FreBSD ports.
Tried Tor version 0.2.2.6-alpha-dev (git-4afdb79051f7b1ca) from a minute
ago or so, fails with OpenSSL 0.9.8e, runs "sort of" with 0.9.8.l but  
still gives the following: 

[snip)
Dec 05 18:05:22.693 [info] connection_edge_process_inbuf(): data from edge
while in 'waiting for circuit' state. Leaving it on buffer.
Dec 05 18:05:22.693 [info] connection_edge_process_inbuf(): data from edge
while in 'waiting for circuit' state. Leaving it on buffer.
Dec 05 18:05:23.295 [warn] TLS error: unexpected close while renegotiating
(SSL_ST_OK)
Dec 05 18:05:23.295 [info] connection_tls_continue_handshake(): tls error
[unexpected close]. breaking connection.
Dec 05 18:05:23.295 [info] circuit_n_conn_done(): or_conn failed. Closing
circ.
[snip]


> 
> If 0.2.2.6-alpha is shown to work well, then we'll release
> 0.2.1.21-stable soon.
>
Well, not really...

 
> Thanks for running a relay!


You're welcome !

Was there a general change in handling StrictEntryNodes, as this does not
work in either combination ?

P.S.: Client with 0.2.2.6-alpha-dev (git-4afdb79051f7b1ca)  does NOT run, 
see:

[snip]
un (up never-contacted),humain (up never-contacted),Strobe (up
never-contacted),moi (up never-contacted),ThinkPenguin (down
never-contacted),Unnamed (up never-contacted),Unnamed (up
never-contacted),wikileaks (up never-contacted),dametenshi (up
never-contacted)
Dec 05 18:30:09.680 [info] circuit_expire_building(): Abandoning circ 0
(state 2:connecting to server, purpose 5)
Dec 05 18:30:09.680 [info] exit circ (length 3, exit gpfTOR6):
$85E9BAF52F2145FBE744C70B3C5CFB04CB6DF6DD(closed) GEO(closed)
gpfTOR6(closed)
Dec 05 18:30:09.680 [info] circuit_build_failed(): Our circuit died before
the first hop with no connection
Dec 05 18:30:09.680 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:10.702 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:11.724 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:12.742 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:13.763 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:14.785 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:15.808 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:16.830 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:17.853 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:18.875 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:19.897 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:20.919 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:21.942 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:22.964 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:23.986 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit circ.
Dec 05 18:30:25.008 [info] circuit_predict_and_launch_new(): Have 2 clean
circs (0 internal), need another exit
[snip]

:(