Skip Menu |

This queue is for tickets about the Net_SSLeay.pm CPAN distribution.

Report information
The Basics
Id: 17107
Status: resolved
Priority: 0/
Queue: Net_SSLeay.pm

People
Owner: rafl [...] debian.org
Requestors: mf [...] mfedv.net
Cc:
AdminCc:

Bug Information
Severity: Normal
Broken in: 1.30
Fixed in: (no value)



Subject: X509_STORE_set_trust not available in openssl-0.9.6
On a system with openssl-0.9.6, the current 1.30 version of Net::SSLeay cannot be installed. "make test" fails when linking SSLeay.so: -------- CPAN Terminal> p [CP_MSG] [Tue Jan 17 15:51:53 2006] Checking if source files are up to date [CP_MSG] [Tue Jan 17 15:51:53 2006] Retrieving /root/.cpanplus/sourcefiles.2.15.stored [CP_MSG] [Tue Jan 17 15:52:06 2006] make[1]: Entering directory `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' make[1]: Leaving directory `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' [CP_ERROR] [Tue Jan 17 15:52:08 2006] MAKE TEST failed: make[1]: Entering directory `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle- 0.50' make[1]: Leaving directory `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' PERL_DL_NONLAZY=1 /usr/local/vwperl/bin/perl "-Iblib/lib" "-Iblib/arch" test.pl Can't load 'blib/arch/auto/Net/SSLeay/SSLeay.so' for module Net::SSLeay: blib/arch/auto/Net/SSLeay/SSLeay.so: undefined symbol: X509_STORE_set_trust at /usr/local/vwperl/lib/5.8.6/i686-linux-thread-multi/DynaLoader.pm line 230. at test.pl line 25 Compilation failed in require at test.pl line 25. BEGIN failed--compilation aborted at test.pl line 25. 1..20 not ok 1 make: *** [test_dynamic] Error 255 The symbol X509_STORE_set_trust does not exist under openssl-0.9.6, it was introduced with openssl-0.9.7 afaik. Perhaps it would be possible to make use of this symbol depend on the installed version of openssl "make test" fails for 1.25, too, but only in test 5 (tcpserver). --------- perl 5.8.6 SuSE Linux 8.2 openssl-0.9.6i, openssl-devel-0.9.6i (SuSE had included the relevant security patches until a few months ago).
RT-Send-CC: net-ssleay-devel [...] lists.alioth.debian.org
On Tue Jan 17 09:56:50 2006, guest wrote: Show quoted text
> On a system with openssl-0.9.6, the current 1.30 version of Net::SSLeay > cannot be installed. "make test" fails when linking SSLeay.so: > > -------- > CPAN Terminal> p > > [CP_MSG] [Tue Jan 17 15:51:53 2006] Checking if source files are up to
date Show quoted text
> [CP_MSG] [Tue Jan 17 15:51:53 2006] Retrieving > /root/.cpanplus/sourcefiles.2.15.stored > [CP_MSG] [Tue Jan 17 15:52:06 2006] make[1]: Entering directory > `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' > make[1]: Leaving directory > `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' > > [CP_ERROR] [Tue Jan 17 15:52:08 2006] MAKE TEST failed: make[1]: > Entering directory > `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle- > 0.50' > make[1]: Leaving directory > `/root/.cpanplus/5.8.6/build/Net_SSLeay.pm-1.30/Net-SSLeay-Handle-0.50' > PERL_DL_NONLAZY=1 /usr/local/vwperl/bin/perl "-Iblib/lib" "-Iblib/arch" > test.pl > Can't load 'blib/arch/auto/Net/SSLeay/SSLeay.so' for module Net::SSLeay: > blib/arch/auto/Net/SSLeay/SSLeay.so: undefined symbol: > X509_STORE_set_trust at
I can reproduce that. We'll fix it with the next release. Show quoted text
> "make test" fails for 1.25, too, but only in test 5 (tcpserver).
This is a problem that should be gone now. 1.30 fixes it. -Flo
RT-Send-CC: net-ssleay-devel [...] lists.alioth.debian.org
I tried to fix this issue in SVN. Can you please check if it works for you? The svn repo is at svn://svn.debian.org/net-ssleay/ -Flo
Subject: Re: [rt.cpan.org #17107] X509_STORE_set_trust not available in openssl-0.9.6
Date: Sat, 21 Jan 2006 23:31:10 +0100
To: bug-Net_SSLeay.pm [...] rt.cpan.org
From: Matthias Ferdinand <mf [...] mfedv.net>
--On Samstag, Januar 21, 2006 08:34:03 -0500 Florian Ragwitz via RT <bug-Net_SSLeay.pm@rt.cpan.org> wrote: Show quoted text
> I tried to fix this issue in SVN. Can you please check if it works for > you? The svn repo is at svn://svn.debian.org/net-ssleay/ > > -Flo
Hi, not sure if I did things correctly - never worked with svn before :-) rapidsvn gave me a bunch of directories. Assuming trunk/ holds the current version. I still got similar messages about missing X509_STORE_... symbols, but not X509_STORE_set_trust. After moving the descriptions for X509_STORE_set_flags X509_STORE_set_purpose inside the "#if OPENSSL_VERSION_NUMBER >= 0x0090800fL" section in SSLeay.xs, the tests run successfully and only test 13 (www.bacus.pt) fails. What is www.bacus.pt supposed to return? When I call it I receive just a number: vwtktl:~/tmp/trunk # /usr/local/vwperl/bin/perl -I blib/lib -I blib/arch \ -e 'use Net::SSLeay qw(sslcat); print join("\n",&Net::SSLeay::sslcat("www.bacus.pt",443,"get\n\r\n\r"),"");' 135711904 vwtktl:~/tmp/trunk # BTW, I had to install Test::Exception to run the tests, which did not autoinstall with 1.25 or 1.30 (I use CPANs 'follow' option). Would this need to be set as a dependency in CPAN? The examples/sslecho.pl script never exits, so a second round of "make test" fails. After I changed ... or die; into ... or die "$!"; in t/07_sslecho.t I could see t/07_sslecho.........Address already in use at t/07_sslecho.t line 24. # Looks like your test died before it could output anything. Diff attached Best regards Matthias

Message body is not shown because sender requested not to inline it.

CC: net-ssleay-devel [...] lists.debian.org
Subject: Re: [rt.cpan.org #17107] X509_STORE_set_trust not available in openssl-0.9.6
Date: Sun, 22 Jan 2006 01:26:50 +0100
To: "mf [...] mfedv.net via RT" <bug-Net_SSLeay.pm [...] rt.cpan.org>
From: Florian Ragwitz <rafl [...] debian.org>
On Sat, Jan 21, 2006 at 05:43:21PM -0500, mf@mfedv.net via RT wrote: Show quoted text
> <URL: http://rt.cpan.org/Ticket/Display.html?id=17107 > > > --On Samstag, Januar 21, 2006 08:34:03 -0500 Florian Ragwitz via RT > <bug-Net_SSLeay.pm@rt.cpan.org> wrote: >
> > I tried to fix this issue in SVN. Can you please check if it works for > > you? The svn repo is at svn://svn.debian.org/net-ssleay/
> > not sure if I did things correctly - never worked with svn before :-) > rapidsvn gave me a bunch of directories. Assuming trunk/ holds the current > version. > I still got similar messages about missing X509_STORE_... symbols, but not > X509_STORE_set_trust. After moving the descriptions for > X509_STORE_set_flags > X509_STORE_set_purpose > inside the "#if OPENSSL_VERSION_NUMBER >= 0x0090800fL" section in > SSLeay.xs, the tests run successfully
You did it right. I'll investigate in which version of openssl those symbols where introduced and check if they should go into the same #if section. Show quoted text
> and only test 13 (www.bacus.pt) fails. > > What is www.bacus.pt supposed to return? When I call it I receive just a > number: > > vwtktl:~/tmp/trunk # /usr/local/vwperl/bin/perl -I blib/lib -I blib/arch \ > -e 'use Net::SSLeay qw(sslcat); print > join("\n",&Net::SSLeay::sslcat("www.bacus.pt",443,"get\n\r\n\r"),"");' > > > 135711904 > vwtktl:~/tmp/trunk #
Actually we only check if the connection was created the right way and if something was returned. Maybe www.bacus.pt is broken for you or something like that. I'll see if I can reproduce it and change it to another server. But if all tests that are run locally succeed everything should work fine. Show quoted text
> BTW, I had to install Test::Exception to run the tests, which did not > autoinstall with 1.25 or 1.30 (I use CPANs 'follow' option).
Yes. We're currently about to refractor the testsuite a bit and the new one uses Test::Exception. Show quoted text
> Would this need to be set as a dependency in CPAN?
This will be done with the next release. You're using svn trunk which is a development snapshot. Things may be always broken there. Show quoted text
> The examples/sslecho.pl script never exits, so a second round of "make > test" fails. After I changed ... or die; into ... or die "$!"; in > t/07_sslecho.t I could see t/07_sslecho.........Address already in use > at t/07_sslecho.t line 24. # Looks like your test died before it > could output anything.
Right. This is an issue of the old test suite which will be fixed as soon as we're fully switched to a Test::More based testsuite. This will be done with the next release. I currently only used 'or die' for things that should be checked somehow but do not justify an own test as we're testing Net::SSLeay and not some perl builtins or Socket functions. I think I will change that to something that skips all following tests if something goes wrong. die actually does the same but with a more confusing output. Regards, Flo -- BOFH excuse #107: The keyboard isn't plugged in
Download signature.asc
application/pgp-signature 189b

Message body not shown because it is not plain text.

RT-Send-CC: net-ssleay-devel [...] lists.alioth.debian.org
X509_STORE_set_flags and X509_STORE_set_purpose were added to the same #if section as X509_STORE_set_trust. The fixed version is now in svn trunk and will be part of the next release. Thanks for your report, Flo
Subject: Re: [rt.cpan.org #17107] X509_STORE_set_trust not available in openssl-0.9.6
Date: Sun, 22 Jan 2006 04:15:47 +0100
To: bug-Net_SSLeay.pm [...] rt.cpan.org
From: Matthias Ferdinand <mf [...] mfedv.net>
--On Samstag, Januar 21, 2006 19:21:57 -0500 Florian Ragwitz via RT <bug-Net_SSLeay.pm@rt.cpan.org> wrote: Show quoted text
> X509_STORE_set_flags and X509_STORE_set_purpose were added to the same ># if section as X509_STORE_set_trust. The fixed version is now in svn > trunk and will be part of the next release. > > Thanks for your report, > Flo
I'm glad I could help Matthias