bug#68474: [Guix-Past]: openssl@1.0.2u does not pass tests

[Jean-Pierre De Jesus Diaz via Bug reports for GNU Guix]

The package at the guix-past channel does not pass the tests at
`tests/cms-test.pl'
file.  It fails with the following error:

>From the build log:

...
CMS consistency test
/gnu/store/lj75fc25zx2y9pqvfp95la84rdhlj4f8-perl-5.36.0/bin/perl cms-test.pl
CMS => PKCS#7 compatibility tests
signed content DER format, RSA key: verify error
```

And the from the error file that the test writes:

$ cat /tmp/guix-build-openssl-1.0.2u.drv-0/openssl-1.0.2u/test/cms.err
Verification failure
140737353281920:error:21075075:PKCS7 routines:PKCS7_verify:certificate
verify error:pk7_smime.c:335:Verify error:certificate has expired

My guix description is:

Generation 74Jan 15 2024 12:28:39(current)
  guix 162d6a2
repository URL: https://git.savannah.gnu.org/git/guix.git
branch: master
commit: 162d6a2fdd6af13272967c77347a54934ecb45e6
  guix-past 0e8c1ea
repository URL: https://gitlab.inria.fr/guix-hpc/guix-past
branch: master
commit: 0e8c1eae3efd34ab291fc6a4b69b767683488bb9

--
Jean-Pierre De Jesus DIAZ
Foundation Devices, Inc.


spxpvzpamzndlggz8xd4d79vis312d-openssl-1.0.2u.drv.gz
Description: application/gzip

bug#68474: [Guix-Past]: openssl@1.0.2u does not pass tests

[Ludovic Courtès]

Hi,

Jean-Pierre De Jesus Diaz  skribis:

> And the from the error file that the test writes:
>
> $ cat /tmp/guix-build-openssl-1.0.2u.drv-0/openssl-1.0.2u/test/cms.err
> Verification failure
> 140737353281920:error:21075075:PKCS7 routines:PKCS7_verify:certificate
> verify error:pk7_smime.c:335:Verify error:certificate has expired

This is a typically “time trap”.  Options are: use libfaketime to run
“make check”, change the certificates so they don’t expire, or skip
those tests.

Would you like to give it a try?

Thanks,
Ludo’.

bug#68474: [Guix-Past]: openssl@1.0.2u does not pass tests

[Jean-Pierre De Jesus Diaz via Bug reports for GNU Guix]

Hi,

On Tue, Jan 30, 2024 at 5:29 PM Ludovic Courtès
 wrote:
>
> Hi,
>
> Jean-Pierre De Jesus Diaz  skribis:
>
> > And the from the error file that the test writes:
> >
> > $ cat /tmp/guix-build-openssl-1.0.2u.drv-0/openssl-1.0.2u/test/cms.err
> > Verification failure
> > 140737353281920:error:21075075:PKCS7 routines:PKCS7_verify:certificate
> > verify error:pk7_smime.c:335:Verify error:certificate has expired
>
> This is a typically “time trap”.  Options are: use libfaketime to run
> “make check”, change the certificates so they don’t expire, or skip
> those tests.
>
> Would you like to give it a try?
>
> Thanks,
> Ludo’.

I'll give it a try to use libfaketime to keep tests enabled.

Thanks,

-- 
Jean-Pierre De Jesus DIAZ
Foundation Devices, Inc.