Bug#903124: libevent-rpc-perl: FTBFS in stretch (sbuild hangs, expired SSL certificate?)

[gregor herrmann]

Control: tag -1 + confirmed stretch
Control: fixed -1 1.09-1
Control: retitle -1 libevent-rpc-perl: 1.08-2 FTBFS: expired SSL certificate

On Fri, 06 Jul 2018 12:57:43 +0000, Santiago Vila wrote:

> Package: src:libevent-rpc-perl
> Version: 1.08-2
> Severity: serious
> Tags: ftbfs
> 
> Dear maintainer:
> 
> I tried to build this package in stretch + security + stretch-proposed-updates
> but it failed:

> Can't open SSL connection to localhost:27816: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed at t/04.cnct-auth-ssl-verifypeer-wrongca.t line 57.
> # Looks like you planned 5 tests but ran 2.
> # Looks like your test exited with 255 just after 2.
> E: Build killed with signal TERM after 60 minutes of inactivity
> --------------------------------------------------------------------------------

Thanks for your bug report.

I can confirm the problem, 1.08-2 fails in a stable chroot (and also
in an unstable chroot). 1.09-1 passes in stable (and unstable), and
the upstream changelog for 1.09 says:

+    Bugfixes:
+    - SSL tests failed due to expired CA certificate.
+      Just created new certificates with 30 year
+      expiration and put a gen.sh script inside to
+      easily generate new certificates after that
+      period ;)

and the certs in /t/ssl/ are indeed renewed.


So the bug only affects 1.08-2 in stable and is caused by the expired
certificate(s) in the package itself.

If we want to fix this in stretch, we probably have to just update
t/ssl/. Or skip t/04.cnct-auth-ssl-verifypeer-wrongca.t (and maybe
also t/04.cnct-auth-ssl-verifypeer.t).


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   NP: Supertramp: Some Things Never Change
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20180706/92b0d9cd/attachment.sig>