Bug#903124: libevent-rpc-perl: FTBFS in stretch (sbuild hangs, expired SSL certificate?)

[Santiago Vila]

Package: src:libevent-rpc-perl
Version: 1.08-2
Severity: serious
Tags: ftbfs

Dear maintainer:

I tried to build this package in stretch + security + stretch-proposed-updates
but it failed:

--------------------------------------------------------------------------------
[...]
 debian/rules build-indep
dh build-indep
   dh_testdir -i
   dh_update_autotools_config -i
   dh_auto_configure -i
	perl -I. Makefile.PL INSTALLDIRS=vendor "OPTIMIZE=-g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2" "LD=x86_64-linux-gnu-gcc -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -Wl,-z,relro"
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for Event::RPC
Writing MYMETA.yml and MYMETA.json
   dh_auto_build -i
	make -j1
make[1]: Entering directory '/<<PKGBUILDDIR>>'
cp lib/Event/RPC/Message.pm blib/lib/Event/RPC/Message.pm
cp lib/Event/RPC/Loop/AnyEvent.pm blib/lib/Event/RPC/Loop/AnyEvent.pm
cp lib/Event/RPC/LogConnection.pm blib/lib/Event/RPC/LogConnection.pm
cp lib/Event/RPC/Connection.pm blib/lib/Event/RPC/Connection.pm
cp lib/Event/RPC/Loop/Event.pm blib/lib/Event/RPC/Loop/Event.pm
cp lib/Event/RPC/Message/SerialiserBase.pm blib/lib/Event/RPC/Message/SerialiserBase.pm
cp lib/Event/RPC/Logger.pm blib/lib/Event/RPC/Logger.pm
cp lib/Event/RPC/AuthPasswdHash.pm blib/lib/Event/RPC/AuthPasswdHash.pm
cp lib/Event/RPC/Message/Negotiate.pm blib/lib/Event/RPC/Message/Negotiate.pm
cp lib/Event/RPC/Message/CBOR.pm blib/lib/Event/RPC/Message/CBOR.pm
cp lib/Event/RPC/Message/JSON.pm blib/lib/Event/RPC/Message/JSON.pm
cp lib/Event/RPC/Server.pm blib/lib/Event/RPC/Server.pm
cp lib/Event/RPC.pm blib/lib/Event/RPC.pm
cp lib/Event/RPC/Loop/Glib.pm blib/lib/Event/RPC/Loop/Glib.pm
cp lib/Event/RPC/Loop.pm blib/lib/Event/RPC/Loop.pm
cp lib/Event/RPC/Message/Storable.pm blib/lib/Event/RPC/Message/Storable.pm
cp lib/Event/RPC/Client.pm blib/lib/Event/RPC/Client.pm
cp lib/Event/RPC/Message/Sereal.pm blib/lib/Event/RPC/Message/Sereal.pm
Manifying 17 pod documents
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
   dh_auto_test -i
	make -j1 test TEST_VERBOSE=1
make[1]: Entering directory '/<<PKGBUILDDIR>>'
PERL_DL_NONLAZY=1 PERL_USE_UNSAFE_INC=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(1, 'blib/lib', 'blib/arch')" t/*.t
t/01.use.t ............................... 
1..2
ok 1 - use Event::RPC::Server;
ok 2 - use Event::RPC::Client;
ok
t/02.cnct.t .............................. 
1..5
ok 1 - use Event::RPC::Client;
ok 2 - connected
ok 3 - object created via RPC
ok 4 - client disconnected
ok 5 - stop server
ok
t/03.cnct-auth.t ......................... 
1..6
ok 1 - use Event::RPC::Client;
ok 2 - connection failed with wrong pw
ok 3 - connected
ok 4 - object created via RPC
ok 5 - client disconnected
ok 6 - server stopped
ok
t/04.cnct-auth-ssl-verifypeer-noca.t ..... 
1..4
ok 1 - use Event::RPC::Client;
ok 2 - ssl connection failed due to unsigned server key
ok 3 - killing server process at PID 25781
ok 4 - server stopped
ok
Can't open SSL connection to localhost:27816: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at t/04.cnct-auth-ssl-verifypeer-wrongca.t line 57.
# Looks like you planned 5 tests but ran 2.
# Looks like your test exited with 255 just after 2.
E: Build killed with signal TERM after 60 minutes of inactivity
--------------------------------------------------------------------------------

A similar error happens here in reproducible builds:

https://tests.reproducible-builds.org/debian/rb-pkg/stretch/amd64/libevent-rpc-perl.html

Waiting time is different in this case ("pbuilder was killed by timeout after 24h")
but the end result is the same.

If this is really a bug in one of the build-depends and you have to
use "reassign", please use "affects" as well, so that this is still
visible in the BTS page for this package.

Thanks.