Re: [naviserver-devel] aead::encrypt test failures

[Gustaf N. <ne...@wu...>]

Small update: with Ubuntu 18.04 +  "OpenSSL 1.1.1-1ubuntu2.1~18.04.21",
also older versions of naviserver do not work (went back until 4.99.20, 
jan 2021).
so, in case this is really needed, it requires detailed debugging, including
comparing the results of OpenSSL API calls.

-gn

On 09.03.23 12:27, Gustaf Neumann wrote:
>
> On 08.03.23 21:52, Andrew Piskorski wrote:
>> Building the NaviServer head (latest code from 2023-03-02), I'm
>> getting two "make test" failures, both from aead::encrypt (below).
>> Any advice for me on what the problem might be,
>
> My first suspicion is the version of OpenSSL in use. OpenSSL is a 
> moving target.
> If i see correctly, there is a version "1.1.1-1ubuntu2.1~18.04.21" in 
> place for
> Ubuntu 18.04 will all updates. It this what you are using?
>
> Options:
> - Upgrade of OpenSSL (i have just tested an installation with 18.04 + 
> OpenSSL 3)
> - Upgrade of Ubuntu (18.04 is not the youngest)
> - Downgrade of NaviServer: there were changes between NaviServer 
> 4.99.23 and .24
>    concerning support of OpenSSL 3.0 - using newer API calls - so maybe
>    these newer API calls are available in this version of OpenSSL, but
>    not fully functioning yet.
>
> ... and of course, provide a fix to "make it work" also in your 
> combination.
>
> -gn
>
>
>> or how I should
>> further track it down?  (Thanks!)
>>
>> This is on an old Ubuntu 18.04.4 LTS machine, using gcc 8.4.0, and Tcl
>> 8.6.13.  My built-from-source Tcl includes nsf 2.4.0, Thread 2.8.9,
>> tdom 0.9.3, and tcllib 1.20.
>>
>>
>> ## Excerpts from "make test" output:
>>
>> [08/Mar/2023:15:23:16][11421.7f2097bfc700][-command-] Notice: 
>> SSL_shutdown(33) has failed: error:14094123:SSL 
>> routines:ssl3_read_bytes:application data after close notify
>> ns_crypt.test
>> ns_crypto.test
>>
>> ==== aead-1.0 aead::encrypt FAILED
>> ---- Result was:
>> bytes 0 tag 32
>> ---- Result should have been (exact matching):
>> bytes 22 tag 32
>> ==== aead-1.0 FAILED
>>
>> ==== aead-1.1 aead::encrypt and decrypt FAILED
>> ---- Test generated error; Return code was: 1
>> ---- Return code should have been one of: 0 2
>> ==== aead-1.1 FAILED
>>
>> Tests ended at Wed Mar 08 15:24:13 EST 2023
>> all.tcl:    Total    1998    Passed    1971    Skipped    25 Failed    2
>> Sourced 71 Test Files.
>> Files with failing tests: ns_driver.test
>> Number of tests skipped for each constraint:
>>     19    !usingExternalToUtf
>>     2    binaryMismatch
>>     1    copyAliasBug
>>     2    knownBug
>>     1    stress
>> Makefile:236: recipe for target 'test' failed
>> make: *** [test] Error 130
>>
-- 
Univ.Prof. Dr. Gustaf Neumann
Head of the Institute of Information Systems and New Media
of Vienna University of Economics and Business
Program Director of MSc "Information Systems"