Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-89715

Unable to establish SSL connection [aarch64]

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • gnutls-3.8.9-16.el10
    • Yes
    • Critical
    • 1
    • rhel-security-crypto
    • ssg_security
    • 14
    • 2
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto25Q2
    • Hide

      a call to gnutls_handshake no longer corrupts next_timeout value on the wget-side callsite [scripted gdb-powered inspection, newly created /CoreOS/gnutls/Regression/RHEL-89715-aarch64-leancrypto-v15-register]

      Show
      a call to gnutls_handshake no longer corrupts next_timeout value on the wget-side callsite [scripted gdb-powered inspection, newly created /CoreOS/gnutls/Regression/RHEL-89715-aarch64-leancrypto-v15-register]
    • Pass
    • Not Needed
    • Automated
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • aarch64
    • None

      What were you trying to do that didn't work?

      on aarch64 system, ssl connection can't be established.
      e.g.
      [root@ampere-mtsnow-01 mode0]# uname -r
      6.12.0-77.el10.aarch64
      [root@ampere-mtsnow-01 mode0]# wget https://certs.corp.redhat.com/certs/Current-IT-Root-CAs.pem
      -2025-05-05 22:49:50- https://certs.corp.redhat.com/certs/Current-IT-Root-CAs.pem
      Resolving certs.corp.redhat.com (certs.corp.redhat.com)... 10.2.70.92
      Connecting to certs.corp.redhat.com (certs.corp.redhat.com)|10.2.70.92|:443... connected.
      Unable to establish SSL connection.

      What is the impact of this issue to you?

      Please provide the package NVR for which the bug is seen:

      [root@ampere-mtsnow-01 mode0]# rpm -q openssl
      openssl-3.5.0-2.el10.aarch64
      [root@ampere-mtsnow-01 mode0]# uname -r
      6.12.0-77.el10.aarch64

      How reproducible is this bug?:

      always

      Steps to reproduce

      1. install os RHEL-10.1-updates-20250505.2 BaseOS aarch64
      2. wget https://certs.corp.redhat.com/certs/Current-IT-Root-CAs.pem

      Expected results

      Actual results

        1. working.pcap
          8 kB
          Clemens Lang
        2. broken.pcap
          5 kB
          Clemens Lang
        3. broken.log
          17 kB
          Clemens Lang
        4. broken-gdb-log-eagain.txt
          18 kB
          Alexander Sosedkin
        5. fixed-gdb-log.txt
          38 kB
          Alexander Sosedkin

              asosedki@redhat.com Alexander Sosedkin
              rhn-support-liali Liang Li
              Daiki Ueno Daiki Ueno
              Ondrej Moris Ondrej Moris
              Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

                Created:
                Updated: