James, I finally got a Debian sid environment up. However, I'm seeing a different sets of test failures right now against vanilla serf 1.4.x and trunk (which works with the scons/python3 in sid without a patch AFAICT) - this is with 1.4.x branch:
--- == Running the unit tests == ...................................................................F......................F..FFF.F............................. There were 6 failures: 1) test_ssl_handshake_nosslv2: test/test_ssl.c:589: Serf does not disable SSLv2, but it should! 2) test_ssl_missing_client_certificate: test/test_ssl.c:1925: expected <120172> but was <120171> 3) test_ssl_server_cert_with_cn_nul_byte: test/test_util.c:551: expected <0> but was <120199> 4) test_ssl_server_cert_with_san_nul_byte: test/test_util.c:551: expected <0> but was <120199> 5) test_ssl_server_cert_with_cnsan_nul_byte: test/test_util.c:551: expected <0> but was <120199> 6) test_ssl_renegotiate: test/test_ssl.c:1881: expected <0> but was <120199> !!!FAILURES!!! Runs: 127 Passes: 121 Fails: 6 --- I'll try to dig into this more over the weekend, but I wonder if I'm seeing something different than you (or the builder) are...I'll also try to pull in your patch set against vanilla 1.3.x to see if I can match the reported error. Cheers. -- justin On Wed, Mar 25, 2020 at 8:17 PM James McCoy <james...@debian.org> wrote: > On Wed, Mar 25, 2020 at 08:57:14AM -0400, Justin Erenkrantz wrote: > > James, > > > > Thanks for the bug report. For reference, the upstream OpenSSL commit > looks to > > be: > > > > https://github.com/openssl/openssl/commit/ > > d924dbf4ae127c68463bcbece04b6e06abc58928 > > > > I strongly suspect that the patch on our side (against 1.3.x) is > something akin > > to below. I'm having trouble getting a test environment up with the > latest > > OpenSSL to reproduce, so if anyone can test in the interim, that'd be > > appreciated. > > Latest Debian sid has everything ready to test, although you'll need the > patch I'm carrying to build since SCons is using Python 3. That reminds > me, I was supposed to send that to the list awhile back. > > > If not, I'll try again as time (and kiddo) permit. > > Unfortunately, that didn't have any effect. > > Cheers, > -- > James > GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB >
