{"action":"created","issue":{"url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/886","repository_url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD","labels_url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/886/labels{/name}","comments_url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/886/comments","events_url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/886/events","html_url":"https://github.com/OpenSMTPD/OpenSMTPD/issues/886","id":377413678,"node_id":"MDU6SXNzdWUzNzc0MTM2Nzg=","number":886,"title":"Errors related to TLS with OpenSMTPD 6.4.0p1 (incl. segfault)","user":{"login":"Ekleog","id":411447,"node_id":"MDQ6VXNlcjQxMTQ0Nw==","avatar_url":"https://avatars1.githubusercontent.com/u/411447?v=4","gravatar_id":"","url":"https://api.github.com/users/Ekleog","html_url":"https://github.com/Ekleog","followers_url":"https://api.github.com/users/Ekleog/followers","following_url":"https://api.github.com/users/Ekleog/following{/other_user}","gists_url":"https://api.github.com/users/Ekleog/gists{/gist_id}","starred_url":"https://api.github.com/users/Ekleog/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Ekleog/subscriptions","organizations_url":"https://api.github.com/users/Ekleog/orgs","repos_url":"https://api.github.com/users/Ekleog/repos","events_url":"https://api.github.com/users/Ekleog/events{/privacy}","received_events_url":"https://api.github.com/users/Ekleog/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"poolpOrg","id":895503,"node_id":"MDQ6VXNlcjg5NTUwMw==","avatar_url":"https://avatars3.githubusercontent.com/u/895503?v=4","gravatar_id":"","url":"https://api.github.com/users/poolpOrg","html_url":"https://github.com/poolpOrg","followers_url":"https://api.github.com/users/poolpOrg/followers","following_url":"https://api.github.com/users/poolpOrg/following{/other_user}","gists_url":"https://api.github.com/users/poolpOrg/gists{/gist_id}","starred_url":"https://api.github.com/users/poolpOrg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/poolpOrg/subscriptions","organizations_url":"https://api.github.com/users/poolpOrg/orgs","repos_url":"https://api.github.com/users/poolpOrg/repos","events_url":"https://api.github.com/users/poolpOrg/events{/privacy}","received_events_url":"https://api.github.com/users/poolpOrg/received_events","type":"User","site_admin":false},"assignees":[{"login":"poolpOrg","id":895503,"node_id":"MDQ6VXNlcjg5NTUwMw==","avatar_url":"https://avatars3.githubusercontent.com/u/895503?v=4","gravatar_id":"","url":"https://api.github.com/users/poolpOrg","html_url":"https://github.com/poolpOrg","followers_url":"https://api.github.com/users/poolpOrg/followers","following_url":"https://api.github.com/users/poolpOrg/following{/other_user}","gists_url":"https://api.github.com/users/poolpOrg/gists{/gist_id}","starred_url":"https://api.github.com/users/poolpOrg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/poolpOrg/subscriptions","organizations_url":"https://api.github.com/users/poolpOrg/orgs","repos_url":"https://api.github.com/users/poolpOrg/repos","events_url":"https://api.github.com/users/poolpOrg/events{/privacy}","received_events_url":"https://api.github.com/users/poolpOrg/received_events","type":"User","site_admin":false},{"login":"ericfaurot","id":1868387,"node_id":"MDQ6VXNlcjE4NjgzODc=","avatar_url":"https://avatars0.githubusercontent.com/u/1868387?v=4","gravatar_id":"","url":"https://api.github.com/users/ericfaurot","html_url":"https://github.com/ericfaurot","followers_url":"https://api.github.com/users/ericfaurot/followers","following_url":"https://api.github.com/users/ericfaurot/following{/other_user}","gists_url":"https://api.github.com/users/ericfaurot/gists{/gist_id}","starred_url":"https://api.github.com/users/ericfaurot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ericfaurot/subscriptions","organizations_url":"https://api.github.com/users/ericfaurot/orgs","repos_url":"https://api.github.com/users/ericfaurot/repos","events_url":"https://api.github.com/users/ericfaurot/events{/privacy}","received_events_url":"https://api.github.com/users/ericfaurot/received_events","type":"User","site_admin":false}],"milestone":null,"comments":19,"created_at":"2018-11-05T14:02:56Z","updated_at":"2018-11-06T20:33:26Z","closed_at":"2018-11-06T18:18:05Z","author_association":"CONTRIBUTOR","body":"Two errors have been reported in what appears to be things related to TLS handling.\r\n\r\n#### First error\r\n\r\nFirst one is OpenSMTPD exiting with exit code 1 on startup when being passed a PKI. Details including full logs are at https://github.com/NixOS/nixpkgs/pull/48901#issuecomment-435838142 and comments below. The reporter confirmed via IRC that this appeared both with `libressl_2_7` (our default) and `libressl_2_8` (after I made them try it).\r\n\r\n#### Second error\r\n\r\nThe second one was reported only via IRC so no link to a previous issue here. It is a segfault that looks pretty much like jumping into the stack (IP and SP being way too close for my taste) when trying to send a mail to GMail over TLS, with apparently perfect reproducibility. The logs are at https://gist.github.com/the-kenny/179d82cbea1c45acf67285ba935297e4.\r\nIt has also been tested with `libressl` 2.7 and 2.8.\r\n\r\n#### Precisions about the build system\r\n\r\nOur OpenSMTPD is built with the following two patches, that I don't think should be relevant to the error at play: [(1)](https://github.com/NixOS/nixpkgs/blob/master/pkgs/servers/mail/opensmtpd/fix-build.diff) and [(2)](https://github.com/NixOS/nixpkgs/blob/master/pkgs/servers/mail/opensmtpd/proc_path.diff). We also substitude `/usr/libexec` with the appropriate path [here](https://github.com/NixOS/nixpkgs/blob/master/pkgs/servers/mail/opensmtpd/default.nix#L25-L26), and remove `chgrp` / `chmod 2555` from `make install`, that aren't possible in our sandboxed build system.\r\n\r\nThe `libressl` dependency defaults to `2.7.4`, and has been tested for the two issues to reproduce with `2.8.2`.\r\nThe other dependencies we pass are currently `libasr-1.0.2`, `libevent-2.1.8`, `zlib-1.2.11`, `bdb-5.3.28` and `linux-pam-1.3.0`.\r\n\r\nDo you have any idea what this might be due to?"},"comment":{"url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/comments/436398549","html_url":"https://github.com/OpenSMTPD/OpenSMTPD/issues/886#issuecomment-436398549","issue_url":"https://api.github.com/repos/OpenSMTPD/OpenSMTPD/issues/886","id":436398549,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjM5ODU0OQ==","user":{"login":"the-kenny","id":31167,"node_id":"MDQ6VXNlcjMxMTY3","avatar_url":"https://avatars0.githubusercontent.com/u/31167?v=4","gravatar_id":"","url":"https://api.github.com/users/the-kenny","html_url":"https://github.com/the-kenny","followers_url":"https://api.github.com/users/the-kenny/followers","following_url":"https://api.github.com/users/the-kenny/following{/other_user}","gists_url":"https://api.github.com/users/the-kenny/gists{/gist_id}","starred_url":"https://api.github.com/users/the-kenny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/the-kenny/subscriptions","organizations_url":"https://api.github.com/users/the-kenny/orgs","repos_url":"https://api.github.com/users/the-kenny/repos","events_url":"https://api.github.com/users/the-kenny/events{/privacy}","received_events_url":"https://api.github.com/users/the-kenny/received_events","type":"User","site_admin":false},"created_at":"2018-11-06T20:33:26Z","updated_at":"2018-11-06T20:33:26Z","author_association":"NONE","body":"I can also confirm that the above patch fixes all issues for me :) Thanks! "}}
{"actor":{"display_login":"the-kenny"}}