Skip Menu |

This queue is for tickets about the Net-SSLeay CPAN distribution.

Report information
The Basics
Id: 129201
Status: resolved
Priority: 0/
Queue: Net-SSLeay
People
Owner: Nobody in particular
Requestors: ppisar [...] redhat.com
Cc:
AdminCc:
Bug Information
Severity: (no value)
Broken in: 1.86_09
Fixed in: 1.86_10

History Show all quoted text
  Tue Apr 16 10:53:54 2019 ppisar [...] redhat.com - Ticket created
Subject: t/local/36_verify.t fails because of expired t/data/chain_twitter.crt.pem
t/data/chain_twitter.crt.pem certificate used by t/local/36_verify.t expired on 2019-04-08. As a result, the test fails: $ prove -b t/local/36_verify.t t/local/36_verify.t .. 1/103 # Failed test 'X509_verify_cert correctly succeeds' # at t/local/36_verify.t line 249. # Failed test 'X509_STORE_CTX_get_error returns ok' # at t/local/36_verify.t line 250. # got: '10' # expected: '0' # Looks like you failed 2 tests of 103. t/local/36_verify.t .. Dubious, test returned 2 (wstat 512, 0x200) Failed 2/103 subtests $ openssl x509 -noout -enddate < t/data/chain_twitter.crt.pem notAfter=Apr 8 12:00:00 2019 GMT
  Tue Apr 16 11:17:08 2019 ppisar [...] redhat.com - Correspondence added
Dne Út 16.dub.2019 10:53:54, ppisar napsal(a): Show quoted text
> t/data/chain_twitter.crt.pem certificate used by t/local/36_verify.t > expired on 2019-04-08. As a result, the test fails: > > $ prove -b t/local/36_verify.t > t/local/36_verify.t .. 1/103 > # Failed test 'X509_verify_cert correctly succeeds' > # at t/local/36_verify.t line 249. > > # Failed test 'X509_STORE_CTX_get_error returns ok' > # at t/local/36_verify.t line 250. > # got: '10' > # expected: '0' > # Looks like you failed 2 tests of 103. > t/local/36_verify.t .. Dubious, test returned 2 (wstat 512, 0x200) > Failed 2/103 subtests > > $ openssl x509 -noout -enddate < t/data/chain_twitter.crt.pem > notAfter=Apr 8 12:00:00 2019 GMT
This seems to be addressed in <https://github.com/radiator-software/p5-net-ssleay/pull/128>.
  Thu Apr 18 05:41:28 2019 ppisar [...] redhat.com - Correspondence added
Dne Út 16.dub.2019 11:17:08, ppisar napsal(a): Show quoted text
> This seems to be addressed in <https://github.com/radiator- > software/p5-net-ssleay/pull/128>.
That fix only used a newer Twitter's certificate that expires soon. Here <https://github.com/radiator-software/p5-net-ssleay/pull/129> is my fix that uses home grown long lasting certificates.
  Fri Apr 19 20:48:59 2019 chrisn [...] cpan.org - Correspondence added
On Thu Apr 18 10:41:28 2019, ppisar wrote: Show quoted text
> Dne Út 16.dub.2019 11:17:08, ppisar napsal(a):
> > This seems to be addressed in <https://github.com/radiator- > > software/p5-net-ssleay/pull/128>.
> > That fix only used a newer Twitter's certificate that expires soon. > > Here <https://github.com/radiator-software/p5-net-ssleay/pull/129> is > my fix that uses home grown long lasting certificates.
Thanks, Petr - I like the idea of using our own certificate chain rather than relying on Twitter's. PR merged.
  Fri Apr 19 20:49:00 2019 The RT System itself - Status changed from 'new' to 'open'
  Fri Apr 19 20:49:00 2019 chrisn [...] cpan.org - Status changed from 'open' to 'patched'
  Sun May 05 02:11:59 2019 chrisn [...] cpan.org - Status changed from 'patched' to 'resolved'
  Sun May 05 02:11:59 2019 chrisn [...] cpan.org - Fixed in 1.86_10 added