Re: [naviserver-devel] aead::encrypt test failures

[Gustaf N. <ne...@wu...>]

On 08.03.23 21:52, Andrew Piskorski wrote:
> Building the NaviServer head (latest code from 2023-03-02), I'm
> getting two "make test" failures, both from aead::encrypt (below).
> Any advice for me on what the problem might be,

My first suspicion is the version of OpenSSL in use. OpenSSL is a moving 
target.
If i see correctly, there is a version "1.1.1-1ubuntu2.1~18.04.21" in 
place for
Ubuntu 18.04 will all updates. It this what you are using?

Options:
- Upgrade of OpenSSL (i have just tested an installation with 18.04 + 
OpenSSL 3)
- Upgrade of Ubuntu (18.04 is not the youngest)
- Downgrade of NaviServer: there were changes between NaviServer 4.99.23 
and .24
    concerning support of OpenSSL 3.0 - using newer API calls - so maybe
    these newer API calls are available in this version of OpenSSL, but
    not fully functioning yet.

... and of course, provide a fix to "make it work" also in your combination.

-gn


> or how I should
> further track it down?  (Thanks!)
>
> This is on an old Ubuntu 18.04.4 LTS machine, using gcc 8.4.0, and Tcl
> 8.6.13.  My built-from-source Tcl includes nsf 2.4.0, Thread 2.8.9,
> tdom 0.9.3, and tcllib 1.20.
>
>
> ## Excerpts from "make test" output:
>
> [08/Mar/2023:15:23:16][11421.7f2097bfc700][-command-] Notice: SSL_shutdown(33) has failed: error:14094123:SSL routines:ssl3_read_bytes:application data after close notify
> ns_crypt.test
> ns_crypto.test
>
> ==== aead-1.0 aead::encrypt FAILED
> ---- Result was:
> bytes 0 tag 32
> ---- Result should have been (exact matching):
> bytes 22 tag 32
> ==== aead-1.0 FAILED
>
> ==== aead-1.1 aead::encrypt and decrypt FAILED
> ---- Test generated error; Return code was: 1
> ---- Return code should have been one of: 0 2
> ==== aead-1.1 FAILED
>
> Tests ended at Wed Mar 08 15:24:13 EST 2023
> all.tcl:	Total	1998	Passed	1971	Skipped	25	Failed	2
> Sourced 71 Test Files.
> Files with failing tests: ns_driver.test
> Number of tests skipped for each constraint:
> 	19	!usingExternalToUtf
> 	2	binaryMismatch
> 	1	copyAliasBug
> 	2	knownBug
> 	1	stress
> Makefile:236: recipe for target 'test' failed
> make: *** [test] Error 130
>
-- 
Univ.Prof. Dr. Gustaf Neumann
Head of the Institute of Information Systems and New Media
of Vienna University of Economics and Business
Program Director of MSc "Information Systems"