SSL errors using v2.6.2

[rfevang]

Looking at the changelog this seems strange, v2.6.1 works fine.

     Caused by: com.google.cloud.storage.StorageException: Error parsing groups
       com.google.cloud.storage.StorageException.translate(StorageException.java:230)
       com.google.cloud.storage.spi.v1.HttpStorageRpc.translate(HttpStorageRpc.java:361)
       com.google.cloud.storage.spi.v1.HttpStorageRpc.create(HttpStorageRpc.java:445)
       com.google.cloud.storage.StorageImpl.lambda$internalDirectUpload$74(StorageImpl.java:1789)
       com.google.cloud.storage.Retrying$DefaultRetrier.run(Retrying.java:165)
       [...]
       Suppressed: com.google.cloud.storage.RetryContext$RetryBudgetExhaustedComment: Unretryable error (attempts: 1, maxAttempts: 6, elapsed: PT0.011S, nextBackoff: PT1.824175796S, timeout: PT50S)
     Caused by: javax.net.ssl.SSLHandshakeException: Error parsing groups
       org.conscrypt.SSLUtils.toSSLHandshakeException(SSLUtils.java:363)
       org.conscrypt.ConscryptEngine.beginHandshakeInternal(ConscryptEngine.java:456)
       org.conscrypt.ConscryptEngine.beginHandshake(ConscryptEngine.java:412)
       org.conscrypt.ConscryptEngineSocket.startHandshake(ConscryptEngineSocket.java:212)
       java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:593)
       [...]
     Caused by: javax.net.ssl.SSLException: Error parsing groups
       org.conscrypt.NativeCrypto.SSL_set1_groups(Native Method)
       org.conscrypt.NativeSsl.initialize(NativeSsl.java:396)
       org.conscrypt.ConscryptEngine.beginHandshakeInternal(ConscryptEngine.java:439)
       [...]

[tholenst]

Thanks for the report.

Looking at the META-INF/MANIFEST.MF in both files, it seems that we built BoringSSL at version https://boringssl.googlesource.com/boringssl/+/5ac7567c234514157a504ff3fbedc0f5eddbf678 in 2.6.1, and at https://boringssl.googlesource.com/boringssl/+/52ba6a143e03e9ac84369f79ac3d06dea0128dab in 2.6.2.

In between these there was change https://boringssl.googlesource.com/boringssl/+/188ce3c13adb70fc416e7e81c5b8052142e8eb8c which removed "X25519Kyber768Draft00".

The corresponding change in #1528 (e.g., to constants/src/gen/cpp/generate_constants.cc, but also others, 952068713 within Google) was not cherry picked.

We will take a look, and probably make a new release with the older BoringSSL version.

[juergw]

This should now be fixed in v2.6.3
https://github.com/google/conscrypt/releases/tag/2.6.3

It uses boringSSL version 0.20260616.0
https://boringssl.googlesource.com/boringssl/+/refs/tags/0.20260616.0.

[fridrich]

Why not to do something like this ignore-unsupported-x25519kyber768draft00-group.patch instead of releasing a no-change version bump with only older boringssl included?

[juergw]

Because I think it's preferable to keep the old behavior for this bug-fix release, and keep including x25519kyber768draft00. Which means, using an old version of boringssl.

It's not a non-change release: the binary on maven is different. But I agree that on GitHub, this was confusing. That's why I did this change: 8e49031. Now we always use a fixed version of boringSSL in CI, and we will also use that same version in releases.