[Debian-iot-maintainers] Bug#1121612: rhonabwy: FTFBS against gnutls 3.8.11

[Andreas Metzler]

Source: rhonabwy
Version: 1.1.13-2.1
Severity: serious
Tags: ftbfs
Justification: fails to build from source (but built successfully in the past)
X-Debbugs-Cc: gnutls28 at packages.debian.org

Hello,

rhonabwy throws a testsuite error when built gainst GnuTLS 3.8.11:

4/25 Testing: jwk_export
4/25 Test: jwk_export
Command: "/home/ametzler/BB/rhonabwy-1.1.13/build/jwk_export"
Directory: /home/ametzler/BB/rhonabwy-1.1.13/test
"jwk_export" start time: Nov 29 12:09 UTC
Output:
----------------------------------------------------------
Running suite(s): Rhonabwy JWK export function tests
85%: Checks: 7, Failures: 1, Errors: 0
./test/jwk_export.c:343:P:test_rhonabwy_export:test_rhonabwy_export_to_str:0: Passed
./test/jwk_export.c:442:P:test_rhonabwy_export:test_rhonabwy_export_to_json:0: Passed
./test/jwk_export.c:472:P:test_rhonabwy_export:test_rhonabwy_export_to_gnutls_privkey:0: Passed
./test/jwk_export.c:552:P:test_rhonabwy_export:test_rhonabwy_export_to_gnutls_pubkey:0: Passed
./test/jwk_export.c:628:P:test_rhonabwy_export:test_rhonabwy_export_to_gnutls_crt:0: Passed
./test/jwk_export.c:662:F:test_rhonabwy_export:test_rhonabwy_export_to_pem:0: Assertion 'o_strncmp(jwk_privkey_ecdsa_pem, (const char *)data, data_len) == 0' failed: o_strncmp(jwk_privkey_ecdsa_pem, (const char *)data, data_len) == 4, 0 == 0
./test/jwk_export.c:751:P:test_rhonabwy_export:test_rhonabwy_export_to_symmetric_key:0: Passed
<end of output>
Test time =   0.16 sec
----------------------------------------------------------
Test Failed.
"jwk_export" end time: Nov 29 12:09 UTC
"jwk_export" time elapsed: 00:00:00
----------------------------------------------------------

I have run git bisect on the GnuTLS side, the test starts to fail on
| 38c57f41fa0a638c229e3dec4275d242a6490d91 Mon Sep 17 00:00:00 2001
| x509: encode ECDSA private key in fixed length
| 
| RFC 5915 section 3 says that the privateKey field of ECPrivateKey
| structure should be fixed length, though the library encoded it in
| variable length, depending on the leading byte. This patch enforces
| that the field is always encoded in fixed length, as well as
| consolidates the code paths for EdDSA and X25519/X448 keys.

Since this was a targeted bugfix on the GnuTLS side
<https://gitlab.com/gnutls/gnutls/-/issues/1747> I suspect the FTFBS is
an error in the rhonabwy testsuite or rhonabwy itself.

cu Andreas