Hello<br> I am currently running Tor v0.2.2.6-alpha (git-1ee580407ccb9130) and this is the error I receive running it.<br> <br>Dec 5 11:50:15 XXX Tor[1300]: TLS error: unexpected close while renegotiating (SSL_ST_OK)<br>Dec 5 11:50:18 XXX Tor[1300]: Tor has successfully opened a circuit. Looks like client functionality is working.<br>
Dec 5 11:50:18 XXX Tor[1300]: Bootstrapped 100%: Done.<br>Dec 5 11:50:18 XXX Tor[1300]: Now checking whether ORPort X.X.X.X:9001 and DirPort X.X.X.X:9030 are reachable... (this may take up to 20 minutes -- look for log messages indicating success)<br>
Dec 5 11:50:18 XXX Tor[1300]: TLS error: unexpected close while renegotiating (SSL_ST_OK)<br>it than goes on to repeat the message once a minute in the log.<br>sockstat does show several connections yet I wonder if they are actually able to relay through?<br>
<br><br><br> <br><br><br><div class="gmail_quote">On Sat, Dec 5, 2009 at 11:39 AM, Andrew Lewman <span dir="ltr"><<a href="mailto:andrew@torproject.org">andrew@torproject.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">On 12/05/2009 09:54 AM, Hans Schnehl wrote:<br>
> [snip]]<br>
> NOTE WELL: This update causes OpenSSL to reject any attempt to renegotiate<br>
> SSL / TLS session parameters. As a result, connections in which the other<br>
> party attempts to renegotiate session parameters will break. In practice,<br>
> however, session renegotiation is a rarely-used feature, so disabling this<br>
> functionality is unlikely to cause problems for most systems.<br>
> [snip]<br>
<br>
</div>Tor initiates a ssl renegotiate at the start of a circuit, the latest<br>
openssl breaks tor. The fixes for this are currently in -alpha only.<br>
The 0.2.1.21-dev in git also contains the fix. We're testing<br>
0.2.2.6-alpha right now,<br>
<a href="https://blog.torproject.org/blog/tor-0226-alpha-released" target="_blank">https://blog.torproject.org/blog/tor-0226-alpha-released</a>. Please try<br>
0.2.2.6-alpha and let us know if it works.<br>
<br>
If 0.2.2.6-alpha is shown to work well, then we'll release<br>
0.2.1.21-stable soon.<br>
<br>
Thanks for running a relay!<br>
<font color="#888888"><br>
--<br>
Andrew Lewman<br>
The Tor Project<br>
pgp 0x31B0974B<br>
<br>
Website: <a href="https://torproject.org/" target="_blank">https://torproject.org/</a><br>
Blog: <a href="https://blog.torproject.org/" target="_blank">https://blog.torproject.org/</a><br>
Identi.ca: torproject<br>
</font></blockquote></div><br>