id = 1471
title = "16fc5726a6 breaks curl SSL connections"
state = "closed"
created_at = "2023-01-30T17:59:16.447Z"
closed_at = "2023-02-16T13:09:22.619Z"
labels = ["accel: TCG", "linux-user", "target: i386", "workflow::Patch available"]
url = "https://gitlab.com/qemu-project/qemu/-/issues/1471"
host-os = "Linux/Debian"
host-arch = "ARM"
qemu-version = "16fc5726a6"
guest-os = "n/a"
guest-arch = "n/a"
description = """`./qemu-x86_64 /path/to/curl-amd64 https://news.bbc.co.uk` should work, just as `./qemu-aarch64 /path/to/curl-aarch64 https://news.bbc.co.uk` does. However, commit 16fc5726a6e296b3f63acec537c299c1dc49d6c4 broke this (determined via `git bisect`)."""
reproduce = """1. Checkout and build `qemu` commit 16fc5726a6e296b3f63acec537c299c1dc49d6c4
2. On an aarch64 host system, download the amd64 build of `curl` from https://github.com/moparisthebest/static-curl/releases/tag/v7.87.0
3. Run `./qemu-x86_64 /path/to/curl-amd64 https://news.bbc.co.uk`
4. Observe the following error message:

```
curl: (35) error:1416D07B:SSL routines:tls_process_key_exchange:bad signature
```

Note that the `aarch64` equivalent works just fine. As does the previous commit using `amd64`. 

Also note, this bug is also present at current tip (13356edb87506c148b163b8c7eb0695647d00c2a)."""
additional = """n/a"""