On Sun May 18 17:21:32 2014, mikem@airspayce.com wrote:
Show quoted text> Hi Steffen,
>
> Version 1.62 has now been uploaded with your latest change.
I'm seeing this with openssl 1.0.0 through to 1.0.0j (openssl 0.9.8* and openssl 1.0.0k onwards seem OK):
$ make test
PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*/*.t t/*/*/*.t
t/external/08_external.t ............... ok
t/external/15_altnames.t ............... ok
t/external/20_cert_chain.t ............. ok
# tcp connect to www.live.com:443 ok
# got stapled OCSP response
# SSL_connect ok
# fingerprint matches
# status=0 as expected: nextUpd=Wed May 21 05:49:50 2014
# no HTTP: skip checking
http://EVIntl-ocsp.verisign.com | /1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Washington/businessCategory=Private Organization/serialNumber=600413485/C=US/postalCode=98052/ST=Washington/L=Redmond/street=1 Microsoft Way/O=Microsoft Corporation/OU=Outlook Kahuna DUB-DC A May2013/CN=mail.live.com
# no HTTP: skip checking
http://EVSecure-ocsp.verisign.com | /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at
https://www.verisign.com/rpa (c)06/CN=VeriSign Class 3 Extended Validation SSL SGC CA
# no HTTP: skip checking
http://ocsp.verisign.com | /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
# tcp connect to www.google.com:443 ok
# got no stapled OCSP response
# SSL_connect ok
# tcp connect to revoked.grc.com:443 ok
# got stapled OCSP response
# SSL_connect ok
# fingerprint matches
# Failed test 'cannot verify response: '
# at t/external/ocsp.t line 178.
# Looks like you failed 1 test of 3.
t/external/ocsp.t ......................
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/3 subtests
(less 1 skipped subtest: 1 okay)
t/handle/external/10_destroy.t ......... ok
t/handle/external/50_external.t ........ ok
t/handle/local/05_use.t ................ ok
t/local/01_pod.t ....................... ok
t/local/02_pod_coverage.t .............. skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING=1
t/local/03_use.t ....................... ok
# Version info:
# Testing Net::SSLeay 1.63, Perl 5.010000, /usr/bin/perl
# OpenSSL version: 'OpenSSL 1.0.0b-fips 16 Nov 2010'
# OpenSSL platform: 'platform: linux-x86_64'
t/local/04_basic.t ..................... ok
t/local/05_passwd_cb.t ................. ok
t/local/06_tcpecho.t ................... ok
t/local/07_sslecho.t ................... ok
t/local/08_pipe.t ...................... ok
t/local/15_bio.t ....................... ok
t/local/20_autoload.t .................. ok
t/local/21_constants.t ................. ok
t/local/30_error.t ..................... ok
t/local/31_rsa_generate_key.t .......... ok
t/local/32_x509_get_cert_info.t ........ ok
t/local/33_x509_create_cert.t .......... ok
t/local/34_x509_crl.t .................. ok
t/local/35_ephemeral.t ................. ok
t/local/36_verify.t .................... ok
t/local/37_asn1_time.t ................. ok
t/local/38_priv-key.t .................. ok
t/local/39_pkcs12.t .................... ok
t/local/40_npn_support.t ............... skipped: openssl 1.0.1 required
t/local/41_alpn_support.t .............. skipped: openssl 1.0.2 required
t/local/50_digest.t .................... ok
t/local/61_threads-cb-crash.t .......... ok
t/local/62_threads-ctx_new-deadlock.t .. ok
t/local/kwalitee.t ..................... skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING=1
Test Summary Report
-------------------
t/external/ocsp.t (Wstat: 256 Tests: 3 Failed: 1)
Failed test: 3
Non-zero exit status: 1
Files=34, Tests=2726, 14 wallclock secs ( 0.40 usr 0.06 sys + 3.03 cusr 0.22 csys = 3.71 CPU)
Result: FAIL
Failed 1/34 test programs. 1/2726 subtests failed.
make: *** [test_dynamic] Error 255