On Mon, Oct 19, 2020 at 7:20 AM Sebastian Parschauer <s.parschauer@gmx.de> wrote:
The libcurl fix removes two superfluous SSL_shutdown() calls as it tries to close the connection three times. Not sure if this is still an issue as I only use http repos and wget instead of curl as a workaroun
Right off the bat, let me say your analysis is correct and this is one of the common misuses of all the crypto libraries, most commonly found with openssl. Now ..I have SEEN this bugs in code..several times.. but NEVER practically experienced any ill effects. do you have anything special in your network or kernel configuration that makes you experience practical ill effects ? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org