-=| Damyan Ivanov, 16.09.2018 11:44:59 +0000 |=- > Package: src:libio-socket-ssl-perl > Version: 2.059-3 > Severity: serious > Justification: fails to build from source (but built successfully in the past) > > https://buildd.debian.org/status/fetch.php?pkg=libio-socket-ssl-perl&arch=all&ver=2.059-3&stamp=1537087640&raw=0 > > I am able to reproduce this if I run `prove -lb > t/verify_fingerprint.t` several
The test passes a thousand runs if the server child ignores SIGPIPE, so this looks like the TLSv1.3 shutdown problem when the client makes a fast SSL shutdown without waiting for the confirmation from the server, then exits, then exits and the server sending its confirmation gets SIGPIPEd. Similar problem exhibits in t/public_suffix_ssl.t and if I add there an explicit ->close(SSL_fast_shutdown=>0) the test survives a thousand runs. I think that when using TLS 1.3, there should be no "fast" shutdown and the client should always wait for the server response. Either that, or all the server code should ignore SIGPIPE during shutdown, which seems like a hard goal. -- dam