Bug 604104

Summary:	net-misc/curl-7.52.1: Unable to sustain concurrent https connections when built with openssl
Product:	Gentoo Linux	Reporter:	Anthony Ryan <anthonyryan1>
Component:	Current packages	Assignee:	Anthony Basile <blueness>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/gentoo/gentoo/pull/3281
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	603574

Description Anthony Ryan 2016-12-30 01:19:03 UTC

net-misc/curl-7.52.1 is unable to sustain multiple concurrent https connections with the openssl backend (gnutls users are not affected).

This issue was introduced in:
https://github.com/curl/curl/commit/cb4e2be7c6d42ca0780f8e0a747cecf9ba45f151

And resolved upstream in:
https://github.com/curl/curl/commit/a7b38c9dc98481e4a5fc37e51a8690337c674dfb

Seeing as this version of curl is being stabilized as part of bug 603574 / CVE-2016-9594, I think we need to get this backported. The inability to have multiple concurrent HTTPS connections is a serious issue for stabilization.

Comment 1 Anthony Ryan 2016-12-30 01:20:14 UTC

Upstream issue: https://github.com/curl/curl/issues/1174

Comment 2 Anthony Basile gentoo-dev

2016-12-30 01:47:35 UTC

thanks for catching this.  i backported and rev bumped.  the fix is in with curl-7.52.1-r1.ebuild.

Comment 3 Kyle Sanderson 2016-12-31 05:37:47 UTC

Thanks guys, I was going insane (like, switched from rtorrent to deluge insane)...

Confirmed fixed in curl-7.52.1-r1.ebuild, broken in the still unmasked curl-7.52.1.ebuild

Comment 4 Anthony Basile gentoo-dev

2016-12-31 11:23:07 UTC

(In reply to Kyle Sanderson from comment #3)
> Thanks guys, I was going insane (like, switched from rtorrent to deluge
> insane)...
> 
> Confirmed fixed in curl-7.52.1-r1.ebuild, broken in the still unmasked
> curl-7.52.1.ebuild

as soon as stabilization occurs on 7.52.1-r1 we will yank 7.52.1.  we can't mask it yet.