Bug#898198: FTBFS (test failures, also seen in autopkgtests) with libcrypt-openssl-rsa-perl >= 0.30-1

[gregor herrmann]

Source: libnet-oauth-perl
Version: 0.28-2
Severity: serious
Control: affects -1 src:libcrypt-openssl-rsa-perl
User: debian-ci at lists.debian.org
Usertags: needs-update
Tags: buser sid upstream
Forwarded: https://github.com/toddr/Crypt-OpenSSL-RSA/issues/14


Dear maintainers,

[This e-mail is automatically sent.]

As recently announced [1] Debian is now running autopkgtests in testing
to check if the migration of a new source package causes regressions. It
does this with the binary packages of the new version of the source
package from unstable.

With a recent upload of libcrypt-openssl-rsa-perl the autopkgtest of
libnet-oauth-perl started to fail in testing [2]. This is currently
delaying the migration of libcrypt-openssl-rsa-perl version 0.30-1 [3].

This e-mail is meant to trigger direct communication between the
maintainers of the involved packages as one party has insight in what
changed and the other party insight in what is being tested. After all,
a regression in a reverse dependency can be due to one of the
following reasons (of course not complete):
* new bug in the candidate package (fix the package)
* bug in the test case that only gets triggered due to the update (fix
  the reverse dependency, but see below)
* out-of-date reference date in the test case that captures a former bug
  in the candidate package (fix the reverse dependency, but see below)
* deprecation of functionality that is used in the reverse dependency
  and/or its test case (discussion needed)

Unfortunately sometimes a regression is only intermittent. Ideally this
should be fixed, but it may be OK to just have the autopkgtest retried
(a link is available in the excuses [3]).

There are cases where it is required to have multiple packages migrate
together to have the test cases pass, e.g. when there was a bug in a
regressing test case of a reverse dependency and that got fixed. In that
case the test cases need to be triggered with both packages from
unstable (reply to this e-mail and/or contact the ci-team [4]) or just wait
until the aging time is over (if the fixed reverse dependency migrates
before that time, the failed test can be retriggered [3]).

Of course no system is perfect. In case a framework issue is suspected,
don't hesitate to raise the issue via BTS or to the ci-team [4] (reply to
me is also fine for initial cross-check).

To avoid stepping on peoples toes, this e-mail does not automatically
generate a bug in the BTS, but it is highly recommended to forward this
e-mail there (psuedo-header boilerplate below [5,6]) in case it is
clear which package should solve this regression.

[1] https://lists.debian.org/debian-devel-announce/2018/05/msg00001.html
[2] https://ci.debian.net/packages/libn/libnet-oauth-perl/testing/amd64/
[3] https://qa.debian.org/excuses.php?package=libcrypt-openssl-rsa-perl
[4] #debci on oftc or debian-ci at lists.debian.org
[5] libcrypt-openssl-rsa-perl has an issue
============
Source: libcrypt-openssl-rsa-perl
Version: 0.30-1
Severity: normal or higher
Control: affects -1 src:libnet-oauth-perl
User: debian-ci at lists.debian.org
Usertags: breaks
============
[6] libnet-oauth-perl has an issue
============
Source: libnet-oauth-perl
Version: 0.28-2
Severity: normal or higher
Control: affects -1 src:libcrypt-openssl-rsa-perl
User: debian-ci at lists.debian.org
Usertags: needs-update
============

-----

As noted in https://lists.debian.org/debian-perl/2018/05/msg00019.html :

This is also seen on cpantesters:
http://matrix.cpantesters.org/?dist=Net-OAuth+0.28

And there's an issue about it:
https://github.com/toddr/Crypt-OpenSSL-RSA/issues/14

I guess we need a patch for libnet-oauth-perl …


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   NP: Supertramp: The Logical Song
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20180508/99af42f3/attachment.sig>