Bug#1127130: opensaml: will FTBFS during forky support period

Santiago Vila sanvila at debian.org
Fri Feb 6 12:02:47 GMT 2026


Package: src:opensaml
Version: 3.3.1-3
Severity: important
Tags: ftbfs forky sid
User: debian-qa at lists.debian.org
Usertags: ftbfs-during-forky-support-period

Dear maintainer:

During a rebuild of all packages in unstable with the system clock set
at 2030-08-09 (estimated to be three years after the release date of forky),
this package failed to build.

Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:

https://people.debian.org/~sanvila/build-logs/ftbfs-future/

About the archive rebuild: This is an effort to keep forky free from
FTBFS bugs during its lifetime as a supported distribution, as
explained here for trixie:

https://lists.debian.org/debian-devel/2024/05/msg00414.html

This category of bugs is considered to be RC for forky, but I will
wait two months from now before raising to serious to give people a
little bit more time to fix them.

The build was made using sbuild and a reduced chroot with only
build-essential packages.

If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:opensaml, so that this is still
visible in the BTS web page for this package.

Thanks.

--------------------------------------------------------------------------------
[...]
libtool: link: g++ -Wall -W -I/usr/include/x86_64-linux-gnu -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -I/usr/include/p11-kit-1 -g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wno-deprecated-declarations -Wl,-z -Wl,relro -Wl,-z -Wl,now -o .libs/samltest samltest-SAMLArtifactCreationTest.o samltest-SAMLArtifactType0001Test.o samltest-SAMLArtifactType0002Test.o samltest-SAMLArtifactType0004Test.o samltest-ArtifactMapTest.o samltest-CookieTest.o encryption/samltest-EncryptedAssertionTest.o signature/samltest-SAML1AssertionTest.o signature/samltest-SAML1RequestTest.o signature/samltest-SAML1ResponseTest.o signature/samltest-SAML2AssertionTest.o security/samltest-ExplicitKeyTrustEngineTest.o security/samltest-StaticPKIXTrustEngineTest.o saml1/core/impl/samltest-ActionTest.o saml1/core/impl/samltest-AdviceTest.o saml1/core/impl/samltest-AssertionIDReferenceTest.o saml1/core/impl/samltest-AssertionTest.o saml1/core/impl/samltest-AttributeDesignatorTest.o saml1/core/impl/samltest-AttributeStatementTest.o saml1/core/impl/samltest-AttributeTest.o saml1/core/impl/samltest-AudienceRestrictionConditionTest.o saml1/core/impl/samltest-AudienceTest.o saml1/core/impl/samltest-AuthenticationStatementTest.o saml1/binding/samltest-SAML1ArtifactTest.o saml1/binding/samltest-SAML1POSTTest.o saml1/profile/samltest-SAML1PolicyTest.o saml2/core/impl/samltest-Action20Test.o saml2/core/impl/samltest-Advice20Test.o saml2/core/impl/samltest-Artifact20Test.o saml2/core/impl/samltest-ArtifactResolve20Test.o saml2/core/impl/samltest-ArtifactResponse20Test.o saml2/core/impl/samltest-Assertion20Test.o saml2/core/impl/samltest-AssertionIDRef20Test.o saml2/core/impl/samltest-AssertionIDRequest20Test.o saml2/core/impl/samltest-AssertionURIRef20Test.o saml2/core/impl/samltest-Attribute20Test.o saml2/core/impl/samltest-AttributeQuery20Test.o saml2/core/impl/samltest-AttributeStatement20Test.o saml2/core/impl/samltest-Audience20Test.o saml2/core/impl/samltest-AudienceRestriction20Test.o saml2/core/impl/samltest-AuthenticatingAuthority20Test.o saml2/core/impl/samltest-AuthnContext20Test.o saml2/core/impl/samltest-AuthnContextClassRef20Test.o saml2/core/impl/samltest-AuthnContextDeclRef20Test.o saml2/core/impl/samltest-AuthnQuery20Test.o saml2/core/impl/samltest-AuthnRequest20Test.o saml2/core/impl/samltest-AuthnStatement20Test.o saml2/core/impl/samltest-AuthzDecisionQuery20Test.o saml2/core/impl/samltest-AuthzDecisionStatement20Test.o saml2/core/impl/samltest-Conditions20Test.o saml2/core/impl/samltest-Evidence20Test.o saml2/core/impl/samltest-GetComplete20Test.o saml2/core/impl/samltest-IDPEntry20Test.o saml2/core/impl/samltest-IDPList20Test.o saml2/core/impl/samltest-Issuer20Test.o saml2/core/impl/samltest-KeyInfoConfirmationDataType20Test.o saml2/core/impl/samltest-LogoutRequest20Test.o saml2/core/impl/samltest-LogoutResponse20Test.o saml2/core/impl/samltest-ManageNameIDRequest20Test.o saml2/core/impl/samltest-ManageNameIDResponse20Test.o saml2/core/impl/samltest-NameIDMappingRequest20Test.o saml2/core/impl/samltest-NameIDMappingResponse20Test.o saml2/core/impl/samltest-NameIDPolicy20Test.o saml2/core/impl/samltest-NameID20Test.o saml2/core/impl/samltest-NameIDType20Test.o saml2/core/impl/samltest-NewEncryptedID20Test.o saml2/core/impl/samltest-NewID20Test.o saml2/core/impl/samltest-OneTimeUse20Test.o saml2/core/impl/samltest-ProxyRestriction20Test.o saml2/core/impl/samltest-RequesterID20Test.o saml2/core/impl/samltest-RequestedAuthnContext20Test.o saml2/core/impl/samltest-Response20Test.o saml2/core/impl/samltest-Scoping20Test.o saml2/core/impl/samltest-SessionIndex20Test.o saml2/core/impl/samltest-Status20Test.o saml2/core/impl/samltest-StatusCode20Test.o saml2/core/impl/samltest-StatusDetail20Test.o saml2/core/impl/samltest-StatusMessage20Test.o saml2/core/impl/samltest-Subject20Test.o saml2/core/impl/samltest-SubjectConfirmation20Test.o saml2/core/impl/samltest-SubjectConfirmationData20Test.o saml2/core/impl/samltest-SubjectLocality20Test.o saml2/core/impl/samltest-Terminate20Test.o saml2/binding/samltest-SAML2ArtifactTest.o saml2/binding/samltest-SAML2POSTTest.o saml2/binding/samltest-SAML2RedirectTest.o saml2/metadata/samltest-XMLMetadataProviderTest.o saml2/profile/samltest-SAML2PolicyTest.o samltest-samltest.o  ../saml/.libs/libsaml.so -lxerces-c -lxml-security-c -lxmltooling -pthread
make[3]: Leaving directory '/<<PKGBUILDDIR>>/samltest'
make  check-TESTS
make[3]: Entering directory '/<<PKGBUILDDIR>>/samltest'
make[4]: Entering directory '/<<PKGBUILDDIR>>/samltest'
../build-aux/test-driver: line 119: 14253 Segmentation fault         "$@" >> "$log_file" 2>&1
FAIL: samltest
=============================================
   opensaml 3.3.1: samltest/test-suite.log
=============================================

# TOTAL: 1
# PASS:  0
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0

System information (uname -a): Linux 6.12.63+deb13-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.63-1 (2025-12-30) x86_64
Distribution information (/etc/os-release):
PRETTY_NAME="Debian GNU/Linux forky/sid"
NAME="Debian GNU/Linux"
VERSION_CODENAME=forky
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

.. contents:: :depth: 2

FAIL: samltest
==============

Running cxxtest tests (316 tests)........1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition

In EncryptedAssertionTest::testEncryptedAssertion:
encryption/EncryptedAssertionTest.h:67: Error: Test failed: Metadata instance was invalid at time of acquisition.
encryption/EncryptedAssertionTest.h:67: Error: Test failed: Exception thrown from setUp()
encryption/EncryptedAssertionTest.h:67: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
In SAML1AssertionTest::testSignature:
./samltest/signature/SAML1AssertionTest.h:40: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125
s
In SAML1RequestTest::testSignature:
./samltest/signature/SAML1RequestTest.h:43: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125
s
In SAML1ResponseTest::testSignature:
./samltest/signature/SAML1ResponseTest.h:43: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125
s..1912507363 ERROR XMLTooling.TrustEngine.PKIX : certificate name was not acceptable
...............................................1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition

In SAML1ArtifactTest::testSAML1Artifact:
saml1/binding/SAML1ArtifactTest.h:45: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml1/binding/SAML1ArtifactTest.h:45: Error: Test failed: Exception thrown from setUp()
saml1/binding/SAML1ArtifactTest.h:45: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition
In SAML1POSTTest::testSAML1POST:
saml1/binding/SAML1POSTTest.h:38: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml1/binding/SAML1POSTTest.h:38: Error: Test failed: Exception thrown from setUp()
saml1/binding/SAML1POSTTest.h:38: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
In SAML1PolicyTest::testSAML1Policy:
saml1/profile/SAML1PolicyTest.h:47: Error: Test failed: Assertion is no longer valid.
................................................................................................................................................................................................................................................1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition

In SAML2ArtifactTest::testSAML2Artifact:
saml2/binding/SAML2ArtifactTest.h:43: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml2/binding/SAML2ArtifactTest.h:43: Error: Test failed: Exception thrown from setUp()
saml2/binding/SAML2ArtifactTest.h:43: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition
In SAML2POSTTest::testSAML2POST:
saml2/binding/SAML2POSTTest.h:38: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml2/binding/SAML2POSTTest.h:38: Error: Test failed: Exception thrown from setUp()
saml2/binding/SAML2POSTTest.h:38: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition
In SAML2POSTTest::testSAML2POSTSimpleSign:
saml2/binding/SAML2POSTTest.h:115: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml2/binding/SAML2POSTTest.h:115: Error: Test failed: Exception thrown from setUp()
saml2/binding/SAML2POSTTest.h:115: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
1912507363 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition
In SAML2RedirectTest::testSAML2Redirect:
saml2/binding/SAML2RedirectTest.h:38: Error: Test failed: Metadata instance was invalid at time of acquisition.
saml2/binding/SAML2RedirectTest.h:38: Error: Test failed: Exception thrown from setUp()
saml2/binding/SAML2RedirectTest.h:38: Error: Expected (suite()->setUp(); ok = true) not to throw, but it did
In XMLMetadataProviderTest::testHTTPProvider:
./internal.h:131: Warning: Test skipped: requires network access
s
In XMLMetadataProviderTest::testBadSig:
./internal.h:131: Warning: Test skipped: requires network access
s1912507363 ERROR OpenSAML.MetadataProvider.Chaining : MetadataProvider child element of type MetadataFilter ignored
1912507363 ERROR OpenSAML.MetadataProvider.Chaining : MetadataProvider child element of type MetadataFilter ignored
.
In XMLMetadataProviderTest::testXMLProvider:
./internal.h:131: Warning: Test skipped: requires network access
s
In XMLMetadataProviderTest::testXMLWithExcludes:
./internal.h:131: Warning: Test skipped: requires network access
s
In XMLMetadataProviderTest::testXMLWithIncludes:
./internal.h:131: Warning: Test skipped: requires network access
s
In SAML2PolicyTest::testSAML2Policy:
saml2/profile/SAML2PolicyTest.h:56: Error: Test failed: Assertion is no longer valid.
.
Failed 9 and Skipped 8 of 316 tests
Success rate: 97%
FAIL samltest (exit status: 139)

============================================================================
Testsuite summary for opensaml 3.3.1
============================================================================
# TOTAL: 1
# PASS:  0
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0
============================================================================
See samltest/test-suite.log for debugging.
Some test(s) failed.  Please report this to https://issues.shibboleth.net/,
together with the test-suite.log file (gzipped) and your system
information.  Thanks.
============================================================================
make[4]: *** [Makefile:2678: test-suite.log] Error 1
make[4]: Leaving directory '/<<PKGBUILDDIR>>/samltest'
make[3]: *** [Makefile:2813: check-TESTS] Error 2
make[3]: Leaving directory '/<<PKGBUILDDIR>>/samltest'
make[2]: *** [Makefile:2886: check-am] Error 2
make[2]: Leaving directory '/<<PKGBUILDDIR>>/samltest'
make[1]: *** [Makefile:593: check-recursive] Error 1
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
dh_auto_test: error: make -j2 check TESTSUITEFLAGS="-j2 --verbose" VERBOSE=1 returned exit code 2
make: *** [debian/rules:12: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
--------------------------------------------------------------------------------



More information about the Pkg-shibboleth-devel mailing list