On Mittwoch, 27. Januar 2021 13:17:23 CET Daniel P. Berrangé wrote: > On Tue, Jan 26, 2021 at 04:41:13PM +0000, Peter Maydell wrote: > > On Tue, 26 Jan 2021 at 16:37, Daniel P. Berrangé <berra...@redhat.com> wrote: > > > On Tue, Jan 26, 2021 at 04:32:08PM +0000, Peter Maydell wrote: > > > > ** (tests/test-crypto-tlscredsx509:35180): CRITICAL **: 16:23:34.590: > > > > Failed to sign certificate ASN1 parser: Value is not valid. > > > > ERROR test-crypto-tlscredsx509 - Bail out! FATAL-CRITICAL: Failed to > > > > sign certificate ASN1 parser: Value is not valid. > > > > make: *** [run-test-70] Error 1 > > > > > > > > > > > > Does this failure ring any bells for anybody? > > > > > > Not seen it before. > > > > > > Is this using a gnutls from homebrew, or one that apple > > > ship themselves ? Any idea what version it is ? > > > > Homebrew gnutls, 3.6.15. > > On further investigation it seems the error comes from libtasn1, > but unfortunately there are 100's of scenarios it could arise > so difficult one to debug.
I haven't looked into the relevant code of this discussion, but is the failing code dealing with Apple certificates? Because Apple just announced a switch of one of their intermediate certificates, so just in case this might be related. Best regards, Christian Schoenebeck