Test failures with compiled OpenSSL 3.0.3 on Debian 11, 64 bit

Tom Browder tom.browder at gmail.com
Fri May 27 19:48:00 UTC 2022


I used the following config input for openssl 3.0.3 based on my
previous successes with 1.1.1m (and earlier versions) and Ivan
Ristic's latest configuration:

config \
    --prefix=/opt/openssl-3.0.3                           \
    --openssldir=/opt/openssl-3.0.3                   \
    no-shared                                                     \
    -DOPENSSL_TLS_SECURITY_LEVEL=2  \
    no-ec2m                         \
    no-rc5                          \
    no-idea                         \
    enable-ec_nistp_64_gcc_128

After compiling successfully, I ran (as a normal user) "make test" and
got several failures:

Failed 1/3 subtests
#   Failed test 'Revoke certificate and generate CRL: notimes'
Failed 10/15 subtests
            # ExpectedResult mismatch: expected Success, got ClientFail.
            # ExpectedResult mismatch: expected Success, got ClientFail.
            # ExpectedResult mismatch: expected Success, got
FirstHandshakeFailed.
            # ExpectedResult mismatch: expected Success, got
FirstHandshakeFailed.
            # ExpectedResult mismatch: expected Success, got ClientFail.
            # ExpectedResult mismatch: expected Success, got ClientFail.
            # ExpectedResult mismatch: expected Success, got
FirstHandshakeFailed.
            # ExpectedResult mismatch: expected Success, got
FirstHandshakeFailed.
    #   Failed test 'running ssl_test 12-ct.cnf'
Failed 1/30 subtests
Failed 6/27 subtests
#   Failed test 'running sslapitest'
Failed 1/1 subtests
60-test_x509_store.t             (Wstat: 256 Tests: 3 Failed: 1)
  Failed test:  1
80-test_ca.t                     (Wstat: 256 Tests: 7 Failed: 2)
  Failed tests:  1, 7
80-test_ssl_new.t                (Wstat: 256 Tests: 30 Failed: 1)
  Failed test:  12
80-test_tsa.t                    (Wstat: 256 Tests: 22 Failed: 1)
  Failed test:  1
90-test_sslapi.t                 (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1

Note I also get similar failures with version 1.1.1o.

I will file a bug with the full config dump output along with the full
output of the test run if the above config input looks reasonable.

Best regards,

-Tom


More information about the openssl-users mailing list