Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dtls1_2

OpenSSL run-checker openssl at openssl.org
Tue Sep 29 12:58:58 UTC 2020


Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dtls1_2

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

    # INFO:  @ ../openssl/test/ssltestlib.c:946
    # SSL_connect() failed -1, 1
    # C0109BE0B97F0000:error::SSL routines::tlsv1 alert internal error:../openssl/ssl/record/rec_layer_d1.c:618:SSL alert number 80
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:1324
    # false
    # ERROR: (bool) 'execute_cleanse_plaintext(DTLS_server_method(), DTLS_client_method(), DTLS1_VERSION, 0) == true' failed @ ../openssl/test/sslapitest.c:1402
    # false
    not ok 4 - test_cleanse_plaintext
# ------------------------------------------------------------------------------
        # INFO:  @ ../openssl/test/ssltestlib.c:964
        # SSL_accept() failed -1, 1
        # C0109BE0B97F0000:error::SSL routines::no suitable signature algorithm:../openssl/ssl/t1_lib.c:3325:
        # INFO:  @ ../openssl/test/ssltestlib.c:946
        # SSL_connect() failed -1, 1
        # C0109BE0B97F0000:error::SSL routines::tlsv1 alert internal error:../openssl/ssl/record/rec_layer_d1.c:618:SSL alert number 80
        # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:6451
        # false
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    not ok 53 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/qQ2Wqn7yO6 default ../../../openssl/test/default.cnf => 1
not ok 1 - running sslapitest
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/ssltestlib.c:946
    # SSL_connect() failed -1, 1
    # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/ssltestlib.c:964
    # SSL_accept() failed -1, 1
    # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:843
    # false
    not ok 3 - test_large_message_dtls
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/ssltestlib.c:946
    # SSL_connect() failed -1, 1
    # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/ssltestlib.c:964
    # SSL_accept() failed -1, 1
    # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:1324
    # false
    # ERROR: (bool) 'execute_cleanse_plaintext(DTLS_server_method(), DTLS_client_method(), DTLS1_VERSION, 0) == true' failed @ ../openssl/test/sslapitest.c:1402
    # false
    not ok 4 - test_cleanse_plaintext
# ------------------------------------------------------------------------------
        # INFO:  @ ../openssl/test/ssltestlib.c:946
        # SSL_connect() failed -1, 1
        # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # INFO:  @ ../openssl/test/ssltestlib.c:964
        # SSL_accept() failed -1, 1
        # C0502D33247F0000:error::SSL routines::no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:123:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:6451
        # false
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    not ok 53 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/qQ2Wqn7yO6 fips ../../../openssl/test/fips-and-base.cnf => 1
not ok 3 - running sslapitest
# ------------------------------------------------------------------------------
#   Failed test 'running sslapitest'
#   at ../openssl/test/recipes/90-test_sslapi.t line 45.
# Looks like you failed 2 tests of 3.90-test_sslapi.t ................... 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/3 subtests 
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. ok
90-test_v3name.t ................... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
80-test_dtls.t                   (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
80-test_ssl_new.t                (Wstat: 1024 Tests: 31 Failed: 4)
  Failed tests:  5, 8, 17, 19
  Non-zero exit status: 4
90-test_sslapi.t                 (Wstat: 512 Tests: 3 Failed: 2)
  Failed tests:  1, 3
  Non-zero exit status: 2
Files=212, Tests=3587, 642 wallclock secs (12.58 usr  1.18 sys + 582.14 cusr 56.31 csys = 652.21 CPU)
Result: FAIL
Makefile:3185: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dtls1_2'
Makefile:3183: recipe for target 'tests' failed
make: *** [tests] Error 2


More information about the openssl-commits mailing list