Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-tls1_3

Wed Feb 24 05:34:05 UTC 2021

Platform and configuration command:

$ uname -a
Linux run 5.4.0-52-generic #57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_3

Commit log since last time:

937a62323b -Wunused-function cleanup
57acc56bdc DECODER: Add better tracing of the chain walking process
acf497b53b DECODER: Use the data structure from the last decoder to select the next
f16e52b67c Correct the return value of BIO_get_ktls_*().
5e128ed120 CMP: Fix total_timeout behavior; small doc and diagnostic improvements
a3361c3755 81-test_cmp_cli_data: fixup on CSR test cases
c2279499fd Fix speed sm2 bug
1d724b5e82 CRYPTO_gcm128_decrypt: fix mac or tag calculation
3352dc185f Fix merge problem in d2i_PrivateKey_ex
eabb301416 Fix DH ASN1 decode so that it detects named groups.
576892d78f Fix d2i_AutoPrivateKey_ex so that is uses the new decoder (and produces non legacy keys).
ef33889e18 doc: remove notes section in OSSL_ENCODER.pod
458d168cd4 rfc2606 compliant example domains for x509v3_config.pod
125107e8ea Various improvements of doc/man5/x509v3_config.pod
70793dbbb9 Pass the object type and data structure from the pem2der decoder
3a2171f6aa Don't forget the type of thing we are loading
3262300a2c Adjust the few places where the string length was confused
247a1786e2 OSSL_PARAM: Correct the assumptions on the UTF8 string length
c1be4d617c Rename internal X509_add_cert_new() to ossl_x509_add_cert_new()
daf1300b80 Add internal X509_add_certs_new(), which simplifies matters
937984efc6 Prepare for 3.0 alpha 13
b467d394eb Prepare for release of 3.0 alpha 12
a28d06f3e9 Update copyright year
7b676cc8c6 Fix external symbols related to provider related security checks for keys and digests.
47c076acfc Fix external symbols in the provider digest implementations.
bcb61b39b4 Add deep copy of propq field in mac_dupctx to avoid double free
5d8ffebbcd DH: Make DH_bits(), DH_size(), and DH_security_bits() check that there are key parameters
0b3139e815 chain_build(): Call verify_cb_cert() if a preliminary error has become final
ba37b82045 dsa_check: Perform simple parameter check if seed is not available
ebcaf110b2 DSA parameter check using pkeyparam
e36b3c2f75 Fix external symbols in the provider cipher implementations.

Build log ended with (last 100 lines):

            # INFO:  @ ../openssl/test/ssl_test.c:117
            # Protocol mismatch: expected TLSv1.3, got TLSv1.2.
            # 
            not ok 2 - iteration 2
# ------------------------------------------------------------------------------
            # ERROR: (int) 'result->client_protocol == test_ctx->expected_protocol' failed @ ../openssl/test/ssl_test.c:114
            # [771] compared to [772]
            # INFO:  @ ../openssl/test/ssl_test.c:117
            # Protocol mismatch: expected TLSv1.3, got TLSv1.2.
            # 
            not ok 3 - iteration 3
# ------------------------------------------------------------------------------
            # ERROR: (int) 'result->client_protocol == test_ctx->expected_protocol' failed @ ../openssl/test/ssl_test.c:114
            # [771] compared to [772]
            # INFO:  @ ../openssl/test/ssl_test.c:117
            # Protocol mismatch: expected TLSv1.3, got TLSv1.2.
            # 
            not ok 4 - iteration 4
# ------------------------------------------------------------------------------
            # ERROR: (int) 'result->client_protocol == test_ctx->expected_protocol' failed @ ../openssl/test/ssl_test.c:114
            # [771] compared to [772]
            # INFO:  @ ../openssl/test/ssl_test.c:117
            # Protocol mismatch: expected TLSv1.3, got TLSv1.2.
            # 
            not ok 5 - iteration 5
# ------------------------------------------------------------------------------
        not ok 1 - test_handshake
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/ssl_test 14-curves.cnf.fips fips ../../../openssl/test/fips-and-base.cnf => 1
    not ok 9 - running ssl_test 14-curves.cnf
# ------------------------------------------------------------------------------
    #   Failed test 'running ssl_test 14-curves.cnf'
    #   at ../openssl/test/recipes/80-test_ssl_new.t line 176.
    # Looks like you failed 3 tests of 9.
not ok 15 - Test configuration 14-curves.cnf
# ------------------------------------------------------------------------------
# Looks like you failed 1 test of 31.80-test_ssl_new.t .................. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/31 subtests 
80-test_ssl_old.t .................. ok
80-test_ssl_test_ctx.t ............. ok
80-test_sslcorrupt.t ............... ok
80-test_tsa.t ...................... ok
80-test_x509aux.t .................. ok
81-test_cmp_cli.t .................. ok
90-test_asn1_time.t ................ ok
90-test_async.t .................... ok
90-test_bio_enc.t .................. ok
90-test_bio_memleak.t .............. ok
90-test_constant_time.t ............ ok
90-test_fatalerr.t ................. ok
90-test_fipsload.t ................. ok
90-test_gmdiff.t ................... ok
90-test_gost.t ..................... skipped: TLSv1.3 or TLSv1.2 are disabled in this OpenSSL build
90-test_ige.t ...................... ok
90-test_includes.t ................. ok
90-test_memleak.t .................. ok
90-test_overhead.t ................. ok
90-test_secmem.t ................... ok
90-test_shlibload.t ................ ok
90-test_srp.t ...................... ok
90-test_sslapi.t ................... ok
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. skipped: test_tls13ccs is not supported in this build
90-test_tls13encryption.t .......... skipped: tls13encryption is not supported in this build
90-test_tls13secrets.t ............. skipped: tls13secrets is not supported in this build
90-test_v3name.t ................... ok
91-test_pkey_check.t ............... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz_asn1.t ................ ok
99-test_fuzz_asn1parse.t ........... ok
99-test_fuzz_bignum.t .............. ok
99-test_fuzz_bndiv.t ............... ok
99-test_fuzz_client.t .............. ok
99-test_fuzz_cmp.t ................. ok
99-test_fuzz_cms.t ................. ok
99-test_fuzz_conf.t ................ ok
99-test_fuzz_crl.t ................. ok
99-test_fuzz_ct.t .................. ok
99-test_fuzz_server.t .............. ok
99-test_fuzz_x509.t ................ ok

Test Summary Report
-------------------
80-test_ssl_new.t                (Wstat: 256 Tests: 31 Failed: 1)
  Failed test:  15
  Non-zero exit status: 1
Files=232, Tests=3223, 1015 wallclock secs (13.48 usr  1.39 sys + 919.46 cusr 91.40 csys = 1025.73 CPU)
Result: FAIL
make[1]: *** [Makefile:3271: _tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-tls1_3'
make: *** [Makefile:3268: tests] Error 2