[bug-notifications] [curl 0005098]: curl fails to connect to any site over SSL

[Mantis Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=5098 
====================================================================== 
Reported By:                soladmin
Assigned To:                dam
====================================================================== 
Project:                    curl
Issue ID:                   5098
Category:                   regular use
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     confirmed
====================================================================== 
Date Submitted:             2013-08-02 21:39 CEST
Last Modified:              2013-08-07 20:56 CEST
====================================================================== 
Summary:                    curl fails to connect to any site over SSL
Description: 
Solaris 10 using opencsw's kiel repository.  Curl always fails when
connecting to any system using SSL.


# curl -v  https://google.com/
* About to connect() to google.com port 443
(https://www.opencsw.org/mantis/view.php?id=0)
*   Trying 173.194.46.32...
* connected
* Connected to google.com (173.194.46.32) port 443
(https://www.opencsw.org/mantis/view.php?id=0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /opt/csw/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState failed
* Closing connection https://www.opencsw.org/mantis/view.php?id=0
curl: (35) error:800960A0:lib(128):PK11_DIGEST_COPY:C_GetOperationState
failed
====================================================================== 

---------------------------------------------------------------------- 
 (0010516) yann (developer) - 2013-08-07 20:56
 https://www.opencsw.org/mantis/view.php?id=5098#c10516 
---------------------------------------------------------------------- 
I tracked the origin of the problem in the patch applied to enable the
pkcs11 engine.

I don't know exactly why it causes some failures and it will takes some
time to find out, so I will release shortly a new version of the openssl
package with pkcs11 engine disabled under sparc.

I'll keep you updated.

Yann