Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-tls1_2

OpenSSL run-checker openssl at openssl.org
Sat May 16 11:03:50 UTC 2020


Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2

Commit log since last time:

fab8fde3fc test/evp_extra_test.c: Add OPENSSL_NO_CMAC around CMAC test
90ad284f4e PROV: make some DER AID arrays non-static, to avoid clang complaints
16e3588d98 .travis.yml: never use -Werror, use --strict-warnings instead
d49be019d2 test/recipes/15-test_rsapss.t: Add test with unrestricted signature
f63f3b7294 test/ssl-tests/20-cert-select.cnf.in: Re-enable RSA-PSS related tests
d59b7a54a5 test/evp_pkey_provided_test.c: Display first, compare after
106ec30bc7 PROV & ASYM_CIPHER: Adapt the RSA asymmetric cipher code for PSS-parameters
e25761b10d EVP: Refactor the RSA-PSS key generation controls for providers
2d5536609b PROV & SIGNATURE: Adapt the RSA signature code for PSS-parameters
2c6094baca EVP: For SIGNATURE operations, pass the propquery early
ea297dca50 PROV & SERIALIZER: Adapt the RSA serializers for PSS-parameters
8a758e96f2 PROV & KEYMGMT: Add PSS-parameter support in the RSA KEYMGMT implementation
0ec36bf117 PROV: Refactor the RSA SIGNATURE implementation for better param control
36a2a551d7 PROV: Refactor the RSA DER support
2275ff656c DER writer: Add the possibility to abandon empty SEQUENCEs
967cc3f939 RSA: Add PSS-parameter processing in EVP_PKEY_ASN1_METHOD functions
15671090f4 RSA: Add a less loaded PSS-parameter structure
e9d6186e05 RSA: Add rsa_schemes.c, to store scheme data and translator functions
645a541a3f RSA: Extract much of the rsa_pkey_export_to() code to a separate function
484d1a73c7 RSA: Add RSA key types
a87820e16b test/evp_extra_test.c: Add test for CMAC keygen with a NULL engine
bcb018e70b EVP: Only use the engine when one is defined, in pkey_mac_ctrl()
c4e3a72720 Add documentation for ASN1_INTEGER_new() and ASN1_INTEGER_free()
63f1883dca Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert()
143be4748e Add -reqin_new_tid option to apps/cmp.c and OSSL_CMP_MSG_update_transactionID()
6b326fc396 Improve CMP documentation regarding use of untrusted certs
8d9a4d833f Chunk 11 of CMP contribution to OpenSSL: CMP command-line interface
3c38fa4b79 Preliminary fix of memory leak in try_decode_PKCS12() - full fix is in #11733
d3d0784e41 Improve description of algorithm NIDs in doc/man3/OSSL_CMP_CTX_new.pod
05f920db39 Reflect constifications of 62dcd2aa in doc/man3/OSSL_CRMF_MSG_get0_tmpl.pod
f55838f34d OSSL_STORE: Make the 'file' scheme loader handle MSBLOB and PVK files
bac4bffbfb OSSL_STORE: Better information when prompting for pass phrases
6ab6ecfd6d OSSL_STORE: Make it possible to attach an OSSL_STORE to an opened BIO
78906fff4a PROV: Adapt all our providers to use the new PROV_CTX structure
05aa8790ac PROV: Add a proper provider context structure for OpenSSL providers
484c24c8d7 Remove explicit dependency on configdata.pm when processing .in files
dd63f9bbfc Fix FreeBSD build with --strict-warnings
7ef4379061 Fix rsa8192.pem

Build log ended with (last 100 lines):

65-test_cmp_server.t ............... ok
65-test_cmp_status.t ............... ok
65-test_cmp_vfy.t .................. ok
70-test_asyncio.t .................. ok
70-test_bad_dtls.t ................. ok
70-test_clienthello.t .............. ok
70-test_comp.t ..................... ok
70-test_key_share.t ................ ok
70-test_packet.t ................... ok
70-test_recordlen.t ................ ok
70-test_renegotiation.t ............ skipped: test_renegotiation needs TLS <= 1.2 enabled
70-test_servername.t ............... ok
70-test_sslcbcpadding.t ............ skipped: test_sslcbcpadding needs TLSv1.2 enabled
70-test_sslcertstatus.t ............ skipped: test_sslcertstatus needs TLS enabled
70-test_sslextension.t ............. ok
70-test_sslmessages.t .............. skipped: test_sslmessages needs TLS enabled
70-test_sslrecords.t ............... skipped: test_sslrecords needs TLSv1.2 enabled
70-test_sslsessiontick.t ........... skipped: test_sslsessiontick needs SSLv3, TLSv1, TLSv1.1 or TLSv1.2 enabled
70-test_sslsigalgs.t ............... ok
70-test_sslsignature.t ............. ok
70-test_sslskewith0p.t ............. ok
70-test_sslversions.t .............. skipped: test_sslversions needs TLS1.3, TLS1.2 and TLS1.1 enabled
70-test_sslvertol.t ................ ok
70-test_tls13alerts.t .............. ok
70-test_tls13cookie.t .............. ok
70-test_tls13downgrade.t ........... skipped: test_tls13downgrade needs TLS1.3 and TLS1.2 enabled
70-test_tls13hrr.t ................. ok
70-test_tls13kexmodes.t ............ ok
70-test_tls13messages.t ............ ok
70-test_tls13psk.t ................. ok
70-test_tlsextms.t ................. skipped: test_tlsextms needs TLSv1.0, TLSv1.1 or TLSv1.2 enabled
70-test_verify_extra.t ............. ok
70-test_wpacket.t .................. ok
71-test_ssl_ctx.t .................. ok
80-test_ca.t ....................... ok
80-test_cipherbytes.t .............. ok
80-test_cipherlist.t ............... ok
80-test_ciphername.t ............... ok
80-test_cms.t ...................... ok
80-test_cmsapi.t ................... ok
80-test_ct.t ....................... ok
80-test_dane.t ..................... ok
80-test_dtls.t ..................... ok
80-test_dtls_mtu.t ................. ok
80-test_dtlsv1listen.t ............. ok
80-test_http.t ..................... ok
80-test_ocsp.t ..................... ok
80-test_pkcs12.t ................... ok
80-test_ssl_new.t .................. ok
80-test_ssl_old.t .................. ok
80-test_ssl_test_ctx.t ............. ok
80-test_sslcorrupt.t ............... ok
80-test_tsa.t ...................... ok
80-test_x509aux.t .................. ok
90-test_asn1_time.t ................ ok
90-test_async.t .................... ok
90-test_bio_enc.t .................. ok
90-test_bio_memleak.t .............. ok
90-test_constant_time.t ............ ok
90-test_fatalerr.t ................. ok
90-test_gmdiff.t ................... ok
90-test_gost.t ..................... skipped: TLSv1.3 or TLSv1.2 are disabled in this OpenSSL build
90-test_ige.t ...................... ok
90-test_includes.t ................. ok
90-test_memleak.t .................. ok
90-test_overhead.t ................. ok
90-test_secmem.t ................... ok
90-test_shlibload.t ................ ok
90-test_srp.t ...................... ok
90-test_sslapi.t ................... ok
90-test_sslbuffers.t ............... ok
90-test_sslprovider.t .............. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/3 subtests 
90-test_store.t .................... ok
90-test_sysdefault.t ............... skipped: test_sysdefault is not supported in this build
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. ok
90-test_v3name.t ................... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
90-test_sslprovider.t            (Wstat: 512 Tests: 3 Failed: 2)
  Failed tests:  2-3
  Non-zero exit status: 2
Files=197, Tests=1906, 528 wallclock secs ( 6.21 usr  1.70 sys + 500.40 cusr 37.16 csys = 545.47 CPU)
Result: FAIL
Makefile:3066: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-tls1_2'
Makefile:3064: recipe for target 'tests' failed
make: *** [tests] Error 2


More information about the openssl-commits mailing list