Bug 2300548

Summary: R-openssl: FTBFS in Fedora rawhide/f41
Product: [Fedora] Fedora Reporter: Fedora Release Engineering <releng>
Component: R-opensslAssignee: Elliott Sales de Andrade <quantum.analyst>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: jmontleo, quantum.analyst, r-maint-sig
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: R-openssl-2.2.0-1.fc41, R-openssl-2.2.0-1.fc42 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-08-14 09:53:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2260875    
Attachments:
Description Flags
build.log
none
root.log
none
state.log none

Description Fedora Release Engineering 2024-07-29 17:29:28 UTC 
R-openssl failed to build from source in Fedora rawhide/f41

https://koji.fedoraproject.org/koji/taskinfo?taskID=120632529


For details on the mass rebuild see:

https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
Please fix R-openssl at your earliest convenience and set the bug's status to
ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks,
R-openssl will be orphaned. Before branching of Fedora 42,
R-openssl will be retired, if it still fails to build.

For more details on the FTBFS policy, please visit:
https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails_to_install/
Comment 1 Fedora Release Engineering 2024-07-29 17:29:33 UTC 
Created attachment 2040745 [details]
build.log
Comment 2 Fedora Release Engineering 2024-07-29 17:29:40 UTC 
Created attachment 2040746 [details]
root.log

file root.log too big, will only attach last 32768 bytes
Comment 3 Fedora Release Engineering 2024-07-29 17:29:43 UTC 
Created attachment 2040747 [details]
state.log
Comment 4 Jason Montleon 2024-08-13 14:01:57 UTC 
The build failure in the attached build.log is due to the missing openssl-devel-engine dependency in Fedora 41. I submitted a PR for this:
https://src.fedoraproject.org/rpms/R-openssl/pull-request/1

But there appears to be an additional failures coming from the tests causing the scratch build to fail.

This did not appear to be a problem in the Fedora 40 build, but I also observed it when trying to bootstrap R packages on RISC-V.
http://fedora.riscv.rocks/kojifiles/work/tasks/712/1780712/build.log

< Linking to: OpenSSL 3.2.2 4 Jun 2024
  Running ‘testthat.R’
 ERROR
Running the tests in ‘tests/testthat.R’ failed.
Last 13 lines of output:
      ▆
   1. ├─testthat::expect_equal(signature_create(msg, sha1, sk1), sig) at test_keys_rsa.R:57:3
   2. │ └─testthat::quasi_label(enquo(object), label, arg = "object")
   3. │   └─rlang::eval_bare(expr, quo_get_env(quo))
   4. └─openssl::signature_create(msg, sha1, sk1)
   5.   └─openssl:::hash_sign(md, sk)
  ── Error ('test_ssl_ctx.R:6:3'): ssl-ctx integration works ─────────────────────
  Error in `download_ssl_cert("cran.r-project.org")`: Failed to resolve hostname or unknown port
  Backtrace:
      ▆
   1. └─openssl::download_ssl_cert("cran.r-project.org") at test_ssl_ctx.R:6:3
  
  [ FAIL 6 | WARN 0 | SKIP 0 | PASS 520 ]
Comment 6 Elliott Sales de Andrade 2024-08-14 08:56:32 UTC 
I believe that mostly has to do with https://fedoraproject.org/wiki/Changes/OpenSSLDistrustSHA1SigVer which can be fixed by https://fedoraproject.org/wiki/SHA1SignaturesGuidance#My_package's_tests_fail_because_they_use_SHA-1_signatures