When upgrading libssl from version 1.0.0g-1 to 1.0.1a-3 MailChimp module cannot connect to MailChimp STS with secure connection. If "Use Secure Connection" is deselected STS works fine, but when trying to use secure connection through libssl1.0.1a-3, message "There was a problem accessing the MailChimp STS service: Could not connect (ERR 0: )" appears.

Comments

levelos’s picture

Status: Active » Postponed (maintainer needs more info)

How is this an issue with MailChimp module?

Corwin’s picture

Because you upgrade libssl and the Mailchimp module breaks. Is the module going to require an old insecure version of libSSL?

with libssl1.0.0: 1.0.1a-3
"There was a problem accessing the MailChimp STS service: Could not connect (ERR 0: )"

levelos’s picture

Here's the relevant code for using a secure connection if you want to submit a patch for how it should change. Also, OpenSSL lists 1.0.1a-3 as unstable.

    if ($this->secure) {
      $sock = fsockopen("ssl://" . $host, 443, $errno, $errstr, 30);
    }
    else {
      $sock = fsockopen($host, 80, $errno, $errstr, 30);
    }
    if (!$sock) {
      $this->errorMessage = "Could not connect (ERR $errno: $errstr)";
      $this->errorCode = "-99";
      ob_end_clean();
      return FALSE;
    }
Corwin’s picture

Looks like you're right, it is a bug in libssl 1.0.1 and not in the Mailchimp module.

Here's two patches for libssl 1.0.1:

https://bbs.archlinux.org/viewtopic.php?pid=1079646#p1079646

levelos’s picture

Status: Postponed (maintainer needs more info) » Closed (works as designed)