Re: Test failures with notmuch 0.32 and 0.32.1 on openSUSE

[Michael J Gruber <git@grubix.eu>]

Dan Čermák venit, vidit, dixit 2021-05-19 10:16:39:
> Hi list,
> 
> notmuch 0.32 recently stopped building on openSUSE Leap and Tumbleweed
> due to failures in the test suite. It now consistently fails in
> T356-protected-headers:
> 
>  FAIL   verify signed PKCS#7 subject (multipart-signed) signer User ID
>         sig_uid: object not found: data[0][0][0]["crypto"]["signed"]["status"][0]["userid"]
>  PASS   verify signed PKCS#7 subject (onepart-signed)
>  FAIL   verify signed PKCS#7 subject (onepart-signed) signer User ID
>         sig_uid: object not found: data[0][0][0]["crypto"]["signed"]["status"][0]["userid"]
>  PASS   confirm signed and encrypted PKCS#7 subject (sign+enc)
>  FAIL   confirm signed and encrypted PKCS#7 subject (sign+enc) signer User ID
>         sig_uid: object not found: data[0][0][0]["crypto"]["signed"]["status"][0]["userid"]
>  PASS   confirm signed and encrypted PKCS#7 subject (sign+enc+legacy-disp)
>  FAIL   confirm signed and encrypted PKCS#7 subject (sign+enc+legacy-disp) signer User ID
>         sig_uid: object not found: data[0][0][0]["crypto"]["signed"]["status"][0]["userid"]
> 
> 
> Unfortunately, I don't really know what the issue at hand is and how to
> debug it. If anyone could help me out here, I'd be very grateful. I have
> attached a Dockerfile that you can use to reproduce this issue (simply
> build it using your favorite container build tool, e.g.
> `buildah bud --layers --build-arg NOTMUCH_VERSION=0.32`). Note that in
> the container build additional tests fail in contrast to building the
> rpm.

I'm no docker guy, sorry. But the failures indicate that the output of
signature verification changed (unless local variables stopped being
local;) ). Can you check whether

notmuch show --decrypt=true --format=json "id:smime-${variant}@protected-headers.example"

for one of the variants (such as sign+enc) gives proper output but
misses sig_uid? You would have to that with
GNUPGHOME="${TEST_TMPDIR}/gnupg" etc.

Maybe gpgsm's output changed?

Michael