Bug#908942: libio-socket-ssl-perl: FTBFS: Connection refused at t/verify_fingerprint.t line 49 and tests hang

[Damyan Ivanov]

-=| Damyan Ivanov, 16.09.2018 11:44:59 +0000 |=-
> Package: src:libio-socket-ssl-perl
> Version: 2.059-3
> Severity: serious
> Justification: fails to build from source (but built successfully in the past)
> 
> https://buildd.debian.org/status/fetch.php?pkg=libio-socket-ssl-perl&arch=all&ver=2.059-3&stamp=1537087640&raw=0
> 
> I am able to reproduce this if I run `prove -lb 
> t/verify_fingerprint.t` several 

The test passes a thousand runs if the server child ignores SIGPIPE, 
so this looks like the TLSv1.3 shutdown problem when the client makes 
a fast SSL shutdown without waiting for the confirmation from the 
server, then exits, then exits and the server sending its confirmation 
gets SIGPIPEd.

Similar problem exhibits in t/public_suffix_ssl.t and if I add there 
an explicit ->close(SSL_fast_shutdown=>0) the test survives a thousand 
runs.

I think that when using TLS 1.3, there should be no "fast" shutdown 
and the client should always wait for the server response. Either 
that, or all the server code should ignore SIGPIPE during shutdown, 
which seems like a hard goal.


-- dam