>Number:         14667
>Category:       pkg
>Synopsis:       Cyrus Imapd package seg faults when SSL/TLS is used
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Nov 21 11:00:01 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Sean Witham
>Release:        NetBSD 1.5.2
>Organization:
Webscreen-technology
>Environment:
System: NetBSD esme.webscreen-technology.com 1.5.2 NetBSD 1.5.2 (GENERIC) #3: Sat Aug 18 23:37:05 CEST 2001 he@hamster.urc.uninett.no:/usr/src/sys/arch/i386/compile/GENERIC i386

Dell PowerEdge, 512MB, / 20gig Disk 8% used, /var 30gig 1% used.
NetBSD 1.5.2
distfiles : 
 cyrus-imapd-2.0.16.tar.gz               patch.3.2.9.1
 cyrus-sasl-1.5.24.tar.gz                patch.3.2.9.2
 db-3.2.9.tar.gz                         ssldump-0.9a2.tar.gz
 openssl-0.9.6-20010914-netbsd.patch.gz  sslwrap206.tar.gz
 openssl-0.9.6.tar.gz

>Description:
	Cyrus Imapd seg faults if a client use ssl or tls.

The cyrus package was installed from package source and in the process
installed the package source release of openssl and its version of libcrypto.
An ldd on on the cyrus tools such as imapd show that they have been linked
against the NetBSD 1.5.2 libcrypto.so.0 and the pkgsrc libcrypto.so.200.
This may be related to the problem.

gdb on the tool imtest shows a seg fault occour when SSL_connect is used.
try imtest -t "" localhost

>How-To-Repeat:

A clean NetBSD 1.5.2 installation on an intel platform, with a sup of the current package source tree, followed by an install of the cyrus-imap package should be enough to create the problem environment.

The fault can then be reproduced by seting up and starting the cyrus imap
system and trying to conenct to it with a TLS configured mail tool. A related
fault can be found by using the imtest tool that comes with the cyrus imapd
package.

>Fix:
I Don't know how to fix this.
>Release-Note:
>Audit-Trail:
>Unformatted: