This program(In reply to comment #29)
> (In reply to comment #28)
> > Created attachment 41486 [details]
> > test program binary
>
> What is this program supposed to do? It seems to download several packets for
> me in wine 1.5.12 and then it dumps a html page.
This program connect https://www.evernote.com and get html using wininet dll.
When your WINE/OpenSSL is affected this bug, you see error message of program and wine.
If you use Wine with openssl 1.0.1 and later, you will see like
With my patch,
$ wine wine_wininet_tls_test.exe > test.html
may successfully get html from evernote.com
edit registry to support TLS1.1/1.2
$ wine regedit
import tls12_enable.reg
You will see same result with unpatched version.
$ wine wine_wininet_tls_test.exe > test.html
err:wininet:NETCON_secure_connect SSL_connect failed: 12157
and then disable TLS1.1/1.2 with registry by regedit importing tls12_disable.reg
you will see successfully get html.
If you use OpenSSL 1.0.0h and before such as 0.9.8m,
which is not support TLS1.1/1.2,
you always success to get html from evernote.com using test program.
This program(In reply to comment #29)
> (In reply to comment #28)
> > Created attachment 41486 [details]
> > test program binary
>
> What is this program supposed to do? It seems to download several packets for
> me in wine 1.5.12 and then it dumps a html page.
This program connect https:/ /www.evernote. com and get html using wininet dll.
When your WINE/OpenSSL is affected this bug, you see error message of program and wine.
If you use Wine with openssl 1.0.1 and later, you will see like
$ wine wine_wininet_ tls_test. exe > test.html NETCON_ secure_ connect SSL_connect failed: 12157
err:wininet:
With my patch, tls_test. exe > test.html
$ wine wine_wininet_
may successfully get html from evernote.com
edit registry to support TLS1.1/1.2
$ wine regedit
import tls12_enable.reg
You will see same result with unpatched version. tls_test. exe > test.html NETCON_ secure_ connect SSL_connect failed: 12157
$ wine wine_wininet_
err:wininet:
and then disable TLS1.1/1.2 with registry by regedit importing tls12_disable.reg
you will see successfully get html.
If you use OpenSSL 1.0.0h and before such as 0.9.8m,
which is not support TLS1.1/1.2,
you always success to get html from evernote.com using test program.