Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dtls1_2-method

OpenSSL run-checker openssl at openssl.org
Wed Feb 24 04:40:14 UTC 2021


Platform and configuration command:

$ uname -a
Linux run 5.4.0-52-generic #57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dtls1_2-method

Commit log since last time:

937a62323b -Wunused-function cleanup
57acc56bdc DECODER: Add better tracing of the chain walking process
acf497b53b DECODER: Use the data structure from the last decoder to select the next
f16e52b67c Correct the return value of BIO_get_ktls_*().
5e128ed120 CMP: Fix total_timeout behavior; small doc and diagnostic improvements
a3361c3755 81-test_cmp_cli_data: fixup on CSR test cases
c2279499fd Fix speed sm2 bug
1d724b5e82 CRYPTO_gcm128_decrypt: fix mac or tag calculation
3352dc185f Fix merge problem in d2i_PrivateKey_ex
eabb301416 Fix DH ASN1 decode so that it detects named groups.
576892d78f Fix d2i_AutoPrivateKey_ex so that is uses the new decoder (and produces non legacy keys).
ef33889e18 doc: remove notes section in OSSL_ENCODER.pod
458d168cd4 rfc2606 compliant example domains for x509v3_config.pod
125107e8ea Various improvements of doc/man5/x509v3_config.pod
70793dbbb9 Pass the object type and data structure from the pem2der decoder
3a2171f6aa Don't forget the type of thing we are loading
3262300a2c Adjust the few places where the string length was confused
247a1786e2 OSSL_PARAM: Correct the assumptions on the UTF8 string length
c1be4d617c Rename internal X509_add_cert_new() to ossl_x509_add_cert_new()
daf1300b80 Add internal X509_add_certs_new(), which simplifies matters
937984efc6 Prepare for 3.0 alpha 13
b467d394eb Prepare for release of 3.0 alpha 12
a28d06f3e9 Update copyright year
7b676cc8c6 Fix external symbols related to provider related security checks for keys and digests.
47c076acfc Fix external symbols in the provider digest implementations.
bcb61b39b4 Add deep copy of propq field in mac_dupctx to avoid double free
5d8ffebbcd DH: Make DH_bits(), DH_size(), and DH_security_bits() check that there are key parameters
0b3139e815 chain_build(): Call verify_cb_cert() if a preliminary error has become final
ba37b82045 dsa_check: Perform simple parameter check if seed is not available
ebcaf110b2 DSA parameter check using pkeyparam
e36b3c2f75 Fix external symbols in the provider cipher implementations.

Build log ended with (last 100 lines):

        # SSL_accept() failed -1, 1
        # 80A17BBA657F0000:error:0A000076:SSL routines:tls_choose_sigalg:no suitable signature algorithm:../openssl/ssl/t1_lib.c:3306:
        # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
        # SSL_connect() failed -1, 1
        # 80A17BBA657F0000:error:0A000438:SSL routines:dtls1_read_bytes:tlsv1 alert internal error:../openssl/ssl/record/rec_layer_d1.c:613:SSL alert number 80
        # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:6577
        # false
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    not ok 54 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/76NEmgTsYp default ../../../openssl/test/default.cnf => 1
not ok 1 - running sslapitest
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
    # SSL_connect() failed -1, 1
    # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
    # SSL_accept() failed -1, 1
    # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:947
    # false
    not ok 3 - test_large_message_dtls
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
    # SSL_connect() failed -1, 1
    # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
    # SSL_accept() failed -1, 1
    # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:1428
    # false
    # ERROR: (bool) 'execute_cleanse_plaintext(DTLS_server_method(), DTLS_client_method(), DTLS1_VERSION, 0) == true' failed @ ../openssl/test/sslapitest.c:1506
    # false
    not ok 4 - test_cleanse_plaintext
# ------------------------------------------------------------------------------
        # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
        # SSL_connect() failed -1, 1
        # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
        # SSL_accept() failed -1, 1
        # 80C11F42C57F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:6577
        # false
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    not ok 54 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/76NEmgTsYp fips ../../../openssl/test/fips-and-base.cnf => 1
not ok 3 - running sslapitest
# ------------------------------------------------------------------------------
#   Failed test 'running sslapitest'
#   at ../openssl/test/recipes/90-test_sslapi.t line 45.
# Looks like you failed 2 tests of 3.90-test_sslapi.t ................... 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/3 subtests 
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. ok
90-test_v3name.t ................... ok
91-test_pkey_check.t ............... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz_asn1.t ................ ok
99-test_fuzz_asn1parse.t ........... ok
99-test_fuzz_bignum.t .............. ok
99-test_fuzz_bndiv.t ............... ok
99-test_fuzz_client.t .............. ok
99-test_fuzz_cmp.t ................. ok
99-test_fuzz_cms.t ................. ok
99-test_fuzz_conf.t ................ ok
99-test_fuzz_crl.t ................. ok
99-test_fuzz_ct.t .................. ok
99-test_fuzz_server.t .............. ok
99-test_fuzz_x509.t ................ ok

Test Summary Report
-------------------
80-test_dtls.t                   (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
80-test_ssl_new.t                (Wstat: 768 Tests: 31 Failed: 3)
  Failed tests:  8, 17, 19
  Non-zero exit status: 3
90-test_sslapi.t                 (Wstat: 512 Tests: 3 Failed: 2)
  Failed tests:  1, 3
  Non-zero exit status: 2
Files=232, Tests=3300, 957 wallclock secs (14.60 usr  1.48 sys + 860.68 cusr 95.15 csys = 971.91 CPU)
Result: FAIL
make[1]: *** [Makefile:3284: _tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dtls1_2-method'
make: *** [Makefile:3281: tests] Error 2


More information about the openssl-commits mailing list