On 20.10.20 08:15, Marcus Meissner wrote:
Firmware is up2date. It uses MAC security. So unknown MAC addresses are blocked. For the osc bug I shortly connected my laptop with the SUSE firewall directly to cable modem and the issue persisted.
The client retransmitted the client hello all the time and was waiting for the server hello which never came. And a lot more errors were visible like "TCP ACKed unseen segment". There is no man in middle issue. The tools just get stuck in the SSL network state machine. There are no atomic operations with Ethernet.
Hmm according to [1], I would rather say that there's probably an issue with the TCP connection. I really fail to see why - a RST is ACKed - the ACK is received on a new _to be established_ connection
IMHO, this TCP behavior should not happen at all/is strange (regardless if a SSL connection is not properly closed or not).
Any ideas?
We could also consider a bad network card / card in a bad (offload?) mode in your machine if this problem is pinned to your machine.
Nope, multiple systems are affected. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org