Bug 1985255

Summary: perl-Net-SSLeay: FTBFS in test suite
Product: Red Hat Enterprise Linux 9 Reporter: Florian Weimer <fweimer>
Component: perl-Net-SSLeayAssignee: Michal Josef Spacek <mspacek>
Status: CLOSED CURRENTRELEASE QA Contact: Martin Kyral <mkyral>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: CentOS StreamCC: bstinson, hhorak, jkejda, jwboyer, mkyral, mspacek, sahana
Target Milestone: betaKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: perl-Net-SSLeay-1.90-6.el9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-12-07 21:30:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
build.log none

Description Florian Weimer 2021-07-23 09:06:50 UTC
Created attachment 1804800 [details]
build.log

Rebuilding perl-Net-SSLeay-1.90-5.el9 against openssl-3.0.0-0.beta1.4.el9 fails with an error in the test suite:

# 
# Testing Net::SSLeay 1.90
# 
# Perl information:
#   Version:         '5.032001'
#   Executable path: '/usr/bin/perl'
# 
# libssl information:
#   SSLEAY_VERSION:      'OpenSSL 3.0.0-beta1 17 Jun 2021'
#   SSLEAY_CFLAGS:       'compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -Wa,--noexecstack -Wa,--generate-missing-build-notes=yes -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG -DPURIFY -DDEVRANDOM="\"/dev/urandom\"" -DSYSTEM_CIPHERS_FILE="/etc/crypto-policies/back-ends/openssl.config"'
#   SSLEAY_BUILT_ON:     'built on: Wed Jul 21 00:00:00 2021 UTC'
#   SSLEAY_PLATFORM:     'platform: linux-x86_64'
#   SSLEAY_DIR:          'OPENSSLDIR: "/etc/pki/tls"'
#   OPENSSL_ENGINES_DIR: 'ENGINESDIR: "/usr/lib64/engines-3"'
t/local/03_use.t ....................... ok
t/local/04_basic.t ..................... ok
#   Failed test 'callback1 called 2 times'
#   at t/local/05_passwd_cb.t line 102.
#          got: '3'
#     expected: '2'
#   Failed test 'callback1 called 2 times'
#   at t/local/05_passwd_cb.t line 180.
#          got: '3'
#     expected: '2'
# Looks like you planned 36 tests but ran 40.
# Looks like you failed 2 tests of 40 run.
t/local/05_passwd_cb.t ................. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 1/36 subtests 
t/local/06_tcpecho.t ................... ok
t/local/07_sslecho.t ................... ok
t/local/08_pipe.t ...................... ok
t/local/09_ctx_new.t ................... ok
t/local/10_rand.t ...................... ok
t/local/11_read.t ...................... ok
t/local/15_bio.t ....................... ok
t/local/20_autoload.t .................. skipped: Some tests need Test::Exception
t/local/21_constants.t ................. skipped: Some tests need Test::Exception
t/local/30_error.t ..................... skipped: Requires Test::Exception, Test::Warn and Test::NoWarnings
t/local/31_rsa_generate_key.t .......... skipped: Test::Exception required
t/local/32_x509_get_cert_info.t ........ ok
t/local/33_x509_create_cert.t .......... ok
t/local/34_x509_crl.t .................. ok
t/local/35_ephemeral.t ................. skipped: LibreSSL and OpenSSL 1.1.0 removed support for ephemeral/temporary RSA private keys
t/local/36_verify.t .................... ok
t/local/37_asn1_time.t ................. ok
t/local/38_priv-key.t .................. ok
t/local/39_pkcs12.t .................... ok
t/local/40_npn_support.t ............... ok
t/local/41_alpn_support.t .............. ok
t/local/42_info_callback.t ............. ok
#   Failed test 'CTX set partially bad ciphersuites'
#   at t/local/43_misc_functions.t line 274.
#          got: '1'
#     expected: '0'
#   Failed test 'SSL set partially bad ciphersuites'
#   at t/local/43_misc_functions.t line 289.
#          got: '1'
#     expected: '0'
# Looks like you failed 2 tests of 46.
t/local/43_misc_functions.t ............ 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/46 subtests 
t/local/44_sess.t ...................... ok
t/local/45_exporter.t .................. ok
t/local/50_digest.t .................... ok
t/local/61_threads-cb-crash.t .......... ok
t/local/62_threads-ctx_new-deadlock.t .. ok
t/local/63_ec_key_generate_key.t ....... ok
t/local/64_ticket_sharing.t ............ ok
t/local/65_security_level.t ............ ok
t/local/65_ticket_sharing_2.t .......... ok
t/local/66_curves.t .................... ok
t/local/kwalitee.t ..................... skipped: These tests are for only for release candidate testing. Enable with RELEASE_TESTING=1
Test Summary Report
-------------------
t/local/05_passwd_cb.t               (Wstat: 512 Tests: 40 Failed: 5)
  Failed tests:  19, 37-40
  Non-zero exit status: 2
  Parse errors: Bad plan.  You planned 36 tests but ran 40.
t/local/43_misc_functions.t          (Wstat: 512 Tests: 46 Failed: 2)
  Failed tests:  4, 9
  Non-zero exit status: 2
Files=40, Tests=1766,  5 wallclock secs ( 0.12 usr  0.07 sys +  4.01 cusr  0.53 csys =  4.73 CPU)
Result: FAIL
Failed 2/40 test programs. 7/1766 subtests failed.
make: *** [Makefile:954: test_dynamic] Error 255

Comment 5 Florian Weimer 2021-08-06 18:54:05 UTC
I'm now getting the failure in the opposite direction:

t/local/03_use.t ....................... ok
t/local/04_basic.t ..................... ok
#   Failed test 'callback1 called 3 times'
#   at t/local/05_passwd_cb.t line 113.
#          got: '2'
#     expected: '3'
#   Failed test 'callback1 called 3 times'
#   at t/local/05_passwd_cb.t line 198.
#          got: '2'
#     expected: '3'
# Looks like you planned 40 tests but ran 36.
# Looks like you failed 2 tests of 36 run.
t/local/05_passwd_cb.t ................. 

It seems that OpenSSL has changed the callback count again.

Comment 6 Michal Josef Spacek 2021-08-11 10:23:14 UTC
Florian Weimer: Yes
Change was 66a7c9f34b46edd462d647ae2febe8276bb9b4f7
- passphrase caching to avoid asking for password twice

Comment 7 Florian Weimer 2021-08-11 10:25:01 UTC
(In reply to Michal Josef Spacek from comment #6)
> Florian Weimer: Yes
> Change was 66a7c9f34b46edd462d647ae2febe8276bb9b4f7
> - passphrase caching to avoid asking for password twice

Thanks. Are you redoing the fix under this bug, or should I file a new bug?

Comment 8 Michal Josef Spacek 2021-08-11 10:31:22 UTC
(In reply to Florian Weimer from comment #7)
> Thanks. Are you redoing the fix under this bug, or should I file a new bug?

As i understand this processes, better way is to create new issue because this ticket is in verification.
This new issue is for openssl 3.0.0-beta2 (and this ticket is for OpenSSL 3.0.0-beta1)

FYI: I have fix and tests for it.

Comment 9 Florian Weimer 2021-08-11 10:44:34 UTC
Fair enough, it's bug 1992571.

Comment 10 Michal Josef Spacek 2021-08-11 11:05:41 UTC
(In reply to Florian Weimer from comment #9)
> Fair enough, it's bug 1992571.

Great, thank you very much.