GNU bug report logs - #34426
xmlsec has test failures

Previous Next

Full log

Message #11 received at 34426 <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de>
Cc: 34426 <at> debbugs.gnu.org
Subject: Re: bug#34426: xmlsec has test failures
Date: Sat, 09 Mar 2019 23:07:27 -0500

Hello Björn,

Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de> writes:

> On Mon, 11 Feb 2019 06:57:57 +0100
> Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de> wrote:
>
>> commit: 50a93adc05b611836e740c4b55571890f4c6770a
>> 
>> Package xmlsec has test failures:
>
> I bisected this error and found out:
>
> It is introduced by updating gnutls from 3.5.18 to 3.6.5 on commit
>
> commit 06f5bc4e12a78883c6f4a543711311bd66e6832b
> Author: Marius Bakke <mbakke <at> fastmail.com>
> Date:   Mon Dec 10 02:38:32 2018 +0100
>
>     gnu: GnuTLS: Update to 3.6.5.
>
> Later on commit:
>
> a46dcdfa3d9002eface76ef9f83e5d34c1ecbfb0
>
> in core-updates GnuTLS it updated to 3.6.6. But here xmlsec still
> has test failures.

Good debugging! This should help us identify what change in GnuTLS might
have broke xmlsec between those versions.

It seems the test suite failures are caused by a single problem:

--8<---------------cut here---------------start------------->8---
Key data "x509" found
 /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/apps/xmlsec1 verify  --crypto gnutls --crypto-config /tmp/xmlsec-crypto-config --trusted-der /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/cacert.der --untrusted-der /tmp/
guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/ca2cert.der  --untrusted-der /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/tests/keys/rsacert.der --enabled-key-data x509 /tmp/guix-build-xmlsec-1.2.27.drv-0/xmlsec1-1.2.27/test
s/aleksey-xmldsig-01/x509data-sn-test.xml
func=xmlSecGnuTLSX509StoreVerify:file=x509vfy.c:line=354:obj=unknown:subj=unknown:error=71:certificate verification failed:gnutls_x509_crt_list_verify: verification failed: status=258u
--8<---------------cut here---------------end--------------->8---

> Has anyone an idea why these tests fail and how to fix it?

I haven't investigated more at this time, but will have too, as it
breaks my Gnucash setup.

Maxim

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.