Public bug reported:

xrootd 6.1.1-1 has been in stonking-proposed for 60 days. It fails to
build on all architectures because one test fails (1 of 336):

https://launchpad.net/ubuntu/+source/xrootd/6.1.1-1/+build/33499641

  The following tests FAILED:
    277 - XRootD::gsi::test (Failed)

Two separate problems show up in the gsi test log:

1. The CRL tests fail:
     || Testing CRL identification
     || Getting extension ......................  FAILED
     || Testing CRL loading
     || Loading CA1 crl ........................  FAILED
   stonking has OpenSSL 4, while Debian (where 6.1.1-1 builds and is in 
testing) is on OpenSSL 3.x. This is likely an OpenSSL 4 API/behaviour change in 
the X.509/CRL handling of XrdCrypto/XrdSecgsi.

2. Authentication fails because of the builder hostname:
     server: XRootD [FATAL] Auth failed: Secgsi: ErrParseBuffer: server 
certificate CN 'localhost' does not match the expected format(s): 
'[*/]lcy02-amd64-081.buildd[/*]' (default)
   The test certificates use CN=localhost, but the server expects the builder's 
FQDN, so this part depends on the build environment.

6.1.0-1build1 stays in the release pocket. Deferred to the next cycle
for a proper investigation (OpenSSL 4 support upstream; Debian unstable
already has 6.2.0-2).

** Affects: xrootd (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl4 stonking update-excuse

** Tags added: ftbfs openssl4 stonking update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170902

Title:
  xrootd 6.1.1 FTBFS: XRootD::gsi::test fails (OpenSSL 4 CRL handling,
  builder hostname in cert CN check)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xrootd/+bug/2170902/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to