Comment 6 for bug 574664

Revision history for this message
Georg Müller (georgmueller) wrote :

I installed the debug packages for libssl0.9.8 and added some debugging code.

EVP_CipherInit_ex fails (returns 0)
ctx->cipher is null, which causes the segfault.

(gdb) p *this->cipher
$2 = {nid = 419, block_size = 16, key_len = 16, iv_len = 16, flags = 5122, init = 0x7ffff5cf47b0 <aes_init_key>, do_cipher = 0x7ffff5cf4c90 <aes_128_cbc_cipher>, cleanup = 0, ctx_size = 244, set_asn1_parameters = 0,
  get_asn1_parameters = 0, ctrl = 0, app_data = 0x0}

My cpu supports aesni. This might cause the problem.
I will have a look into the aesni patches in libssl0.9.8

My test with vanilla strongswan 4.3.2 was w/o openssl support, this may be the reason why it worked there