Bug#907427: openssl 1.1.1 breaks ssl tests

[Andy Simpkins]

control: tag -1 unreproducible
control: severity -1 important



A clean chroot build does not reproduce this bug pulls in:
   libssl1.1 (= 1.1.1b-1)

current build logs suggest this also builds successfully with:  
   openssl_1.1.1a-1


Suspect that this was a transient bug

/Andy (with help from jmw)

Bug#907427: openssl 1.1.1 breaks ssl tests

[Sebastian Andrzej Siewior]

On 2018-08-27 22:52:06 [+0200], Sandro Knauß wrote:
> Source: qtbase-opensource-src, kimap
> Version: kimap/18.07.90-1
> Control: block 907015 by -1
> 
> When I built my KDE PIM packages locally I built against openssl 1.1.0h-4 and 
> I had no issues running the KIMAP tests.
> With openssl 1.1.1~~pre9-1 (experimental) the tests breaks. See [1] for more 
> examples.
> 
> You may want to merge with #907340 or #907340, as those are also failings 
> tests because of openssl 1.1.1.
> 
> hefee
> 
> [1] https://buildd.debian.org/status/package.php?p=kimap=experimental
> 
> [...]
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "Error 
> loading local certificate, error:140AB18F:SSL 
> routines:SSL_CTX_use_certificate:ee key too small"
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
> QAbstractSocket::SocketError(21)
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "Unable 
> to init SSL Context: "
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
> QAbstractSocket::SocketError(20)
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "The 
> remote host closed the connection"
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
> QAbstractSocket::RemoteHostClosedError
> QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
> org.kde.pim.kimap: Connection to server lost  0
> FAIL!  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
> 'login->exec()' returned FALSE. ()
>Loc: [/<>/autotests/loginjobtest.cpp(250)]

Could you try to increase the keys used in the testsuite to atleast
2048bit? Then it should pass. If that is the case than please unblock
the bug.

Sebastian

Bug#907427: openssl 1.1.1 breaks ssl tests

[Sandro Knauß]

Source: qtbase-opensource-src, kimap
Version: kimap/18.07.90-1
Control: block 907015 by -1

When I built my KDE PIM packages locally I built against openssl 1.1.0h-4 and I 
had no issues running the KIMAP tests.
With openssl 1.1.1~~pre9-1 (experimental) the tests breaks. See [1] for more 
examples.

You may want to merge with #907340 or #907340, as those are also failings tests 
because of openssl 1.1.1.

hefee

[1] https://buildd.debian.org/status/package.php?p=kimap=experimental

[...]
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "Error 
loading local certificate, error:140AB18F:SSL 
routines:SSL_CTX_use_certificate:ee key too small"
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
QAbstractSocket::SocketError(21)
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "Unable 
to init SSL Context: "
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
QAbstractSocket::SocketError(20)
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) "The 
remote host closed the connection"
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
QAbstractSocket::RemoteHostClosedError
QWARN  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
org.kde.pim.kimap: Connection to server lost  0
FAIL!  : LoginJobTest::shouldUseSsl(any protocol with anyssl version) 
'login->exec()' returned FALSE. ()
   Loc: [/<>/autotests/loginjobtest.cpp(250)]
[...]

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libqt5network5 depends on:
ii  libc6 2.27-5
ii  libqt5core5a [qtbase-abi-5-11-0]  5.11.1+dfsg-7
ii  libqt5dbus5   5.11.1+dfsg-7
ii  libssl1.1 1.1.1~~pre9-1
ii  libstdc++68.2.0-4
ii  zlib1g1:1.2.11.dfsg-1

libqt5network5 recommends no packages.

libqt5network5 suggests no packages.

-- no debconf information