On Wed, Jan 27, 2021 at 06:59:17PM +0000, Daniel P. Berrangé wrote:
> On Wed, Jan 27, 2021 at 07:56:16PM +0100, Stefan Weil wrote:
> > Am 27.01.21 um 19:17 schrieb Daniel P. Berrangé:
> >
> > > On Wed, Jan 27, 2021 at 06:05:08PM +0100, Stefan Weil wrote:
> > > > Am 27.01.21 um 17:53 schrieb Daniel P. Berrangé:
> > > >
> > > > > In $QEMU.git/crypto/init.c can you uncomment the "#define
> > > > > DEBUG_GNUTLS"
> > > > > line and then re-build and re-run the test case.
> > > > >
> > > > > There's a bunch of debug logs in code paths from
> > > > > gnutls_x509_crt_privkey_sign
> > > > > that might give us useful info.
> > > > >
> > > > > Regards,
> > > > > Daniel
> > > >
> > > > % LANG=C.UTF-8 tests/test-crypto-tlscredsx509
> > > > # random seed: R02S9b95072a368ad370cdd4c780b8074596
> > > > 3: ASSERT: mpi.c[wrap_nettle_mpi_print]:60
> > > > 3: ASSERT: mpi.c[wrap_nettle_mpi_print]:60
> > > > 2: signing structure using RSA-SHA256
> > > > 3: ASSERT: common.c[_gnutls_x509_der_encode]:855
> > > > 3: ASSERT: sign.c[_gnutls_x509_pkix_sign]:174
> > > > 3: ASSERT: x509_write.c[gnutls_x509_crt_privkey_sign]:1834
> > > > 3: ASSERT: x509_write.c[gnutls_x509_crt_sign2]:1152
> > > > Bail out! FATAL-CRITICAL: Failed to sign certificate ASN1 parser: Value
> > > > is
> > > > not valid.
> > > So it shows its failing inside a asn1_der_coding call, but I can't see
> > > why it would fail, especially if the same test suite passes fine on
> > > macOS x86_64 hosts.
> >
> >
> > It returns ASN1_MEM_ERROR, so the input vector is too small.
>
> Hmm, that's odd - "Value is not valid" corresponds to
> ASN1_VALUE_NOT_VALID error code.
>
Hi Daniel, Stefan,
It's interesting that "make check" of libtasn1 fails with three tests
and two of them produce VALUE_NOT_VALID error.
The failing tests are:
FAIL: Test_parser
FAIL: Test_tree
FAIL: copynode
Full test log:
===============================================
GNU Libtasn1 4.16.0: tests/test-suite.log
===============================================
# TOTAL: 30
# PASS: 27
# SKIP: 0
# XFAIL: 0
# FAIL: 3
# XPASS: 0
# ERROR: 0
.. contents:: :depth: 2
FAIL: Test_parser
=================
ERROR N. 1:
Line 5 - TEST_PARSER2 { } DEFINITIONS IMPLICIT TAGS ::= BEGIN int1 ::=
INTEGER END
Error expected: SYNTAX_ERROR - Test_parser_ERROR.asn:6: Error: syntax error,
unexpected IDENTIFIER, expecting $end near 'TEST_PARSER'
Error detected: SYNTAX_ERROR - Test_parser_ERROR.asn:6: Error: syntax error,
unexpected IDENTIFIER, expecting end of file near 'TEST_PARSER'
FAIL Test_parser (exit status: 1)
FAIL: Test_tree
===============
./Test_tree.asn:121: Warning: VisibleString is a built-in ASN.1 type.
./Test_tree.asn:123: Warning: NumericString is a built-in ASN.1 type.
./Test_tree.asn:125: Warning: IA5String is a built-in ASN.1 type.
./Test_tree.asn:127: Warning: TeletexString is a built-in ASN.1 type.
./Test_tree.asn:129: Warning: PrintableString is a built-in ASN.1 type.
./Test_tree.asn:131: Warning: UniversalString is a built-in ASN.1 type.
./Test_tree.asn:134: Warning: BMPString is a built-in ASN.1 type.
./Test_tree.asn:138: Warning: UTF8String is a built-in ASN.1 type.
Error at line 707
ERROR in 254:
Action 18 -
Error expected: MEM_ERROR - 79
Error detected: VALUE_NOT_VALID - 0
FAIL Test_tree (exit status: 1)
FAIL: copynode
==============
./pkix.asn:332: Warning: VisibleString is a built-in ASN.1 type.
./pkix.asn:334: Warning: NumericString is a built-in ASN.1 type.
./pkix.asn:336: Warning: IA5String is a built-in ASN.1 type.
./pkix.asn:338: Warning: TeletexString is a built-in ASN.1 type.
./pkix.asn:340: Warning: PrintableString is a built-in ASN.1 type.
./pkix.asn:342: Warning: UniversalString is a built-in ASN.1 type.
./pkix.asn:345: Warning: BMPString is a built-in ASN.1 type.
./pkix.asn:349: Warning: UTF8String is a built-in ASN.1 type.
LIBTASN1 ERROR: VALUE_NOT_VALID
Cannot copy node
FAIL copynode (exit status: 1)
Regards,
Roman
