Skip Menu |

This queue is for tickets about the Net-SSLeay CPAN distribution.

Report information
The Basics
Id: 120006
Status: rejected
Priority: 0/
Queue: Net-SSLeay

People
Owner: Nobody in particular
Requestors: paul [...] city-fan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 1.80
Fixed in: (no value)



Subject: t/local/34_x509_crl.t failing with OpenSSL 1.1.0d
This is on Fedora Rawhide, where 1.1.0c passes and updating to 1.1.0d makes this happen: $ make test "/usr/bin/perl" "-Iinc" -MExtUtils::Command::MM -e 'cp_nonempty' -- SSLeay.bs blib/arch/auto/Net/SSLeay/SSLeay.bs 644 PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'i nc', 'blib/lib', 'blib/arch')" t/*/*.t t/*/*/*.t t/external/08_external.t ............... ok t/external/15_altnames.t ............... ok t/external/20_cert_chain.t ............. ok # tcp connect to www.microsoft.com:443 ok # got stapled OCSP response # SSL_connect ok # tcp connect to www.heise.de:443 ok # got no stapled OCSP response # SSL_connect ok # fingerprint matches # status=0 as expected: nextUpd=Tue Jan 31 11:29:03 2017 # status=0 as expected: nextUpd=Wed Feb 1 04:08:47 2017 # tcp connect to revoked.grc.com:443 ok # got stapled OCSP response # SSL_connect ok # fingerprint matches # status=1 as expected: nextUpd=Sun Jan 29 16:21:05 2017 # status=1 as expected: nextUpd=Tue Jan 31 08:36:22 2017 # status=0 as expected: nextUpd=Tue Jan 31 08:36:23 2017 t/external/ocsp.t ...................... ok t/handle/external/10_destroy.t ......... ok t/handle/external/50_external.t ........ ok t/handle/local/05_use.t ................ ok t/local/01_pod.t ....................... ok t/local/02_pod_coverage.t .............. skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING= 1 t/local/03_use.t ....................... ok # Version info: # Testing Net::SSLeay 1.80, Perl 5.024001, /usr/bin/perl # OpenSSL version: 'OpenSSL 1.1.0d-fips 26 Jan 2017' # OpenSSL platform: 'OPENSSLDIR: "/etc/pki/tls"' t/local/04_basic.t ..................... ok t/local/05_passwd_cb.t ................. ok t/local/06_tcpecho.t ................... ok t/local/07_sslecho.t ................... ok t/local/08_pipe.t ...................... ok t/local/15_bio.t ....................... ok t/local/20_autoload.t .................. ok t/local/21_constants.t ................. ok t/local/30_error.t ..................... ok t/local/31_rsa_generate_key.t .......... ok t/local/32_x509_get_cert_info.t ........ ok t/local/33_x509_create_cert.t .......... ok # Failed test 'X509_CRL_digest' # at t/local/34_x509_crl.t line 49. # got: '0000000000000000000000000000000000000000' # expected: '2a49fa78444070d2bce08b2ea5213099b3e065fd' # Looks like you failed 1 test of 41. t/local/34_x509_crl.t .................. Dubious, test returned 1 (wstat 256, 0x100) Failed 1/41 subtests t/local/35_ephemeral.t ................. skipped: libressl and OpenSSL 1.1 removed support for ephemeral/temporary RSA private keys t/local/36_verify.t .................... ok t/local/37_asn1_time.t ................. ok t/local/38_priv-key.t .................. ok t/local/39_pkcs12.t .................... ok t/local/40_npn_support.t ............... ok t/local/41_alpn_support.t .............. ok t/local/42_info_callback.t ............. ok t/local/50_digest.t .................... ok t/local/61_threads-cb-crash.t .......... ok t/local/62_threads-ctx_new-deadlock.t .. ok t/local/63_ec_key_generate_key.t ....... ok t/local/64_ticket_sharing.t ............ ok t/local/kwalitee.t ..................... skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING=1 Test Summary Report ------------------- t/local/34_x509_crl.t (Wstat: 256 Tests: 41 Failed: 1) Failed test: 19 Non-zero exit status: 1 Files=37, Tests=2782, 10 wallclock secs ( 0.14 usr 0.02 sys + 2.16 cusr 0.23 csys = 2.55 CPU) Result: FAIL Failed 1/37 test programs. 1/2782 subtests failed. make: *** [Makefile:979: test_dynamic] Error 255 Can't see anything that looks like it might cause this in the OpenSSL changelog though.
We're seeing this on Debian as well: https://bugs.debian.org/852920 And according to the Debian OpenSSL maintainer (in the above bug report), this is a problem in OpenSSL 1.1.0d which is already been worked on: https://github.com/openssl/openssl/issues/2313 https://github.com/openssl/openssl/pull/2314 Cheers, gregor
From: paul [...] city-fan.org
Subject: Re: [rt.cpan.org #120006] t/local/34_x509_crl.t failing with OpenSSL 1.1.0d
Date: Mon, 30 Jan 2017 16:55:11 +1000
To: bug-Net-SSLeay [...] rt.cpan.org
From: Mike McCauley <mikem [...] airspayce.com>
OK, so no action required from me? Cheers. On Sunday, January 29, 2017 05:52:04 AM you wrote: Show quoted text
> Queue: Net-SSLeay > Ticket <URL: https://rt.cpan.org/Ticket/Display.html?id=120006 > > > Fedora OpenSSL ticket: > > https://bugzilla.redhat.com/show_bug.cgi?id=1417436
-- Mike McCauley VK4AMM mikem@airspayce.com Airspayce Pty Ltd 9 Bulbul Place Currumbin Waters QLD 4223 Australia http://www.airspayce.com Phone +61 7 5598-7474
From: paul [...] city-fan.org
On Mon Jan 30 02:18:19 2017, mikem@airspayce.com wrote: Show quoted text
> OK, so no action required from me?
Correct. The upstream fix has landed in Fedora Rawhide and Net-SSLeay is building OK again now.