From mboxrd@z Thu Jan 1 00:00:00 1970 From: Maxim Cournoyer Subject: bug#34426: xmlsec has test failures Date: Sat, 09 Mar 2019 23:07:27 -0500 Message-ID: <871s3ftls0.fsf@apteryx.i-did-not-set--mail-host-address--so-tickle-me> References: <20190211065757.73b8a9c9@alma-ubu> <20190222230545.454b4c24@alma-ubu> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([209.51.188.92]:42888) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h2pkp-0007eu-2p for bug-guix@gnu.org; Sat, 09 Mar 2019 23:08:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h2pko-0000je-7U for bug-guix@gnu.org; Sat, 09 Mar 2019 23:08:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:52290) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1h2pko-0000jV-0o for bug-guix@gnu.org; Sat, 09 Mar 2019 23:08:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1h2pkn-0004qS-MP for bug-guix@gnu.org; Sat, 09 Mar 2019 23:08:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20190222230545.454b4c24@alma-ubu> ("=?UTF-8?Q?Bj=C3=B6rn_?= =?UTF-8?Q?H=C3=B6fling?="'s message of "Fri, 22 Feb 2019 23:05:45 +0100") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: =?UTF-8?Q?Bj=C3=B6rn_?= =?UTF-8?Q?H=C3=B6fling?= Cc: 34426@debbugs.gnu.org Hello Bj=C3=B6rn, Bj=C3=B6rn H=C3=B6fling writes: > On Mon, 11 Feb 2019 06:57:57 +0100 > Bj=C3=B6rn H=C3=B6fling wrote: > >> commit: 50a93adc05b611836e740c4b55571890f4c6770a >>=20 >> Package xmlsec has test failures: > > I bisected this error and found out: > > It is introduced by updating gnutls from 3.5.18 to 3.6.5 on commit > > commit 06f5bc4e12a78883c6f4a543711311bd66e6832b > Author: Marius Bakke > Date: Mon Dec 10 02:38:32 2018 +0100 > > gnu: GnuTLS: Update to 3.6.5. > > Later on commit: > > a46dcdfa3d9002eface76ef9f83e5d34c1ecbfb0 > > in core-updates GnuTLS it updated to 3.6.6. But here xmlsec still > has test failures. Good debugging! This should help us identify what change in GnuTLS might have broke xmlsec between those versions. It seems the test suite failures are caused by a single problem: --8<---------------cut here---------------start------------->8--- Key data "x509" found /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/apps/xmlsec1 verify --= crypto gnutls --crypto-config /tmp/xmlsec-crypto-config --trusted-der /tmp/= guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/cacert.der --untru= sted-der /tmp/ guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/ca2cert.der --unt= rusted-der /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/rs= acert.der --enabled-key-data x509 /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlse= c1-1.2.27/test s/aleksey-xmldsig-01/x509data-sn-test.xml func=3DxmlSecGnuTLSX509StoreVerify:file=3Dx509vfy.c:line=3D354:obj=3Dunknow= n:subj=3Dunknown:error=3D71:certificate verification failed:gnutls_x509_crt= _list_verify: verification failed: status=3D258u --8<---------------cut here---------------end--------------->8--- > Has anyone an idea why these tests fail and how to fix it? I haven't investigated more at this time, but will have too, as it breaks my Gnucash setup. Maxim