#1006516 nordugrid-arc: FTBFS with OpenSSL 3.0

Package:
src:nordugrid-arc
Source:
nordugrid-arc
Submitter:
Sebastian Andrzej Siewior
Date:
2022-05-16 09:57:06 UTC
Severity:
serious
Tags:
#1006516#5
Date:
2022-02-26 17:13:12 UTC
From:
To:
Your package is failing to build using OpenSSL 3.0 with the
following error:

| PASS: UsernameTokenTest
| .There is not wsu:Id attribute in soap body, add a new one
| Envelope: <soap-env:Envelope xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401 -wss-wssecurity-utility-1.0.xsd" xmlns:soap-enc="http://www.w3.org/2003/05/soap-encoding" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns :xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap-env="http://www.w3.org/2003/05/soap-envelope">  <soap-env:Header xmlns:wsse="htt p://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssec urity-secext-1.1.xsd">  <wsse:Security><wsse:BinarySecurityToken wsu:Id="binarytoken" ValueType="http://docs.oasis-open.org/wss/2004/01/oasi s-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soapmessage-security-1.0#B ase64Binary">MIIDYTCCAkmgAwIBAgIBATANBgkqhkiG9w0BAQsFADAqMQ0wCwYDVQQKDARHcmlk
| MQwwCgYDVQQLDANBUkMxCzAJBgNVBAMMAkNBMB4XDTIyMDIyNjE2MDgwMloXDTIy
| MDMyODE2MDgwMlowMTENMAsGA1UECgwER3JpZDEMMAoGA1UECwwDQVJDMRIwEAYD
| VQQDDAlsb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5
| ifhVzIClYXCcNfKFIVMxR4rl39M9OTr3K9wwg8bK5mZOoPZGixiE8UpyxX//nnK8
| 2Hsw3Sfl9ycoKnzxHSliD81MTuAemYqL95xbM3OT2rogtxEpw7rD/taqCP2PW0rh
| CrtXdlpw0bfEyO8WqyNb8/O8D8UWvcOipn1go1WgQo71IaS15WW7s02PHZVIH0xA
| nPX+nWMWKIzLomejELtQl7fPkkzVDLvHB9Ny0szW2vfLduVRialeAxD/0XmwNtiH
| mYKhIyrwVParFmybjOMHeVi+1STGgCdneO5YlXbh+RkpKUgwS9ds44u8sJaoD5Ge
| LBS30VpjyerLw3HLk+TXAgMBAAGjgYowgYcwGAYDVR0RBBEwD4INRE5TOmxvY2Fs
| aG9zdDAJBgNVHRMEAjAAMAsGA1UdDwQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD
| ATAdBgNVHQ4EFgQU+CzEas3y2XHQfe4w4WFiNNRRrL0wHwYDVR0jBBgwFoAU+L3m
| 0yjZ/RPNT78dOH2CBbzHAMgwDQYJKoZIhvcNAQELBQADggEBAFfwiGbc3x0I5lDW
| QvhtYHzY+a76suKj5c6V//LRzESE84+Em9uvDmNMhJKA5a5DOc1dTzCF8hBYACoj
| Q9Duch/aZno1Kp2jJhEevIk2sr3KHL5zjoVyvJAWx6oFaWJHoEeJPAVBHWZVzrzm
| 4GMdItt4JdA3EmlZpXfHk4YSCtWXfKkYNWsaXOcdTQPVOBO64+6jITXl0KMGZA+3
| zGLTISAYW/fBoyFvRqe8QXHbOnTdlgGFA+SMChF4KJ5ohjtM2HmfQl6f5ChGDZ4r
| /61RwQV25NwUT5MPFgvcMffvmMxwastbe7iH4d+OH5Rg4tzx1bCapFw0+AKu0tN/
| SyWS0jg=</wsse:BinarySecurityToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
| <SignedInfo>
| <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
| <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
| <Reference URI="#body">
| <Transforms>
| <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
| <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
| </Transforms>
| <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
| <DigestValue>Ahent2k5+9UuVCkbkIgVycWUQE8=</DigestValue>
| </Reference>
| <Reference URI="#binarytoken">
| <Transforms>
| <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
| <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
| </Transforms>
| <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
| <DigestValue>StQe2sQQTtLnTV5Dhe5+3MorSLA=</DigestValue>
| </Reference>
| </SignedInfo>
| <SignatureValue>DyWVPP/GAdVgIQd68J54rx7GCc9eJcoCyX99XCaMCoxBBAWKKVDhPBZEmQYL8fgm
| PkA7+q+loDejgdepwWrzEDMBPhI1LDUKwu/w6W/w+SLJDj06jerUCmEZDsfyOZqs
| j1Iq5D4bsbhimdhCEzRYdNpCavIR5PsQwbF2aRz2BFgMLEsac3zimZzJUmTzaOTF
| D7heoNX+OlKYdgDkmcQ49AWcjnWO4fr1a0IJxv1EC9tblqRZD5/dzuU4BHIr841D
| e7vE8dj2TAlLr6qCBBm/yz6kMY6kO0ya6iCV0V87HqkvjOnszwlyhkSTrONUPKut
| e7wztvWEew8aWkUeVr0o1Q==</SignatureValue>
| <KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#binarytoken"/></wsse:SecurityTokenReference></KeyInfo>
| </Signature></wsse:Security></soap-env:Header>  <soap-env:Body wsu:Id="body">    <f:Delete xmlns:f="http://example.com/fabrikam">       <max Count>42</maxCount>    </f:Delete>  </soap-env:Body></soap-env:Envelope>
| Can not load public key
| F.func=xmlSecOpenSSLAppDefaultKeysMngrAdoptKey:file=app.c:line=1282:obj=unknown:subj=key != NULL:error=100:assertion:
| Failed to add key from ../../credential/test/host_cert.pem to keys manager
| func=xmlSecKeyDestroy:file=keys.c:line=553:obj=unknown:subj=key != NULL:error=100:assertion:
| func=xmlSecEncCtxEncDataNodeRead:file=xmlenc.c:line=779:obj=unknown:subj=unknown:error=45:key is not found:encMethod=rsa-1_5
| func=xmlSecEncCtxBinaryEncrypt:file=xmlenc.c:line=296:obj=unknown:subj=xmlSecEncCtxEncDataNodeRead:error=1:xmlsec library function failed:
| func=xmlSecKeyDataEncryptedKeyXmlWrite:file=keyinfo.c:line=1438:obj=enc-key:subj=xmlSecEncCtxBinaryEncrypt:error=1:xmlsec library function f ailed:
| func=xmlSecKeyInfoNodeWrite:file=keyinfo.c:line=182:obj=enc-key:subj=xmlSecKeyDataXmlWrite:error=1:xmlsec library function failed:node=Encry ptedKey
| func=xmlSecEncCtxEncDataNodeWrite:file=xmlenc.c:line=832:obj=unknown:subj=xmlSecKeyInfoNodeWrite:error=1:xmlsec library function failed:
| func=xmlSecEncCtxXmlEncrypt:file=xmlenc.c:line=396:obj=unknown:subj=xmlSecEncCtxEncDataNodeWrite:error=1:xmlsec library function failed:
| Encryption failed
| Body new : <?xml version="1.0"?>
| <soap-env:Body xmlns:soap-env="http://www.w3.org/2003/05/soap-envelope">    <f:Delete xmlns:f="http://example.com/fabrikam">       <maxCount >42</maxCount>    </f:Delete>  </soap-env:Body>
|
| Encrypted data :
| func=xmlSecPtrListEmpty:file=list.c:line=141:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListEmpty:file=list.c:line=141:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| func=xmlSecPtrListFinalize:file=list.c:line=127:obj=unknown:subj=xmlSecPtrListIsValid(list):error=100:assertion:
| Envelope: <soap-env:Envelope xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401 -wss-wssecurity-utility-1.0.xsd" xmlns:soap-enc="http://www.w3.org/2003/05/soap-encoding" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns :xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap-env="http://www.w3.org/2003/05/soap-envelope" xmlns:xenc="http://www.w3.org/2001 /04/xmlenc#">  <soap-env:Header xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040 1-wss-wssecurity-secext-1.0.xsd" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd">  <wsse:Security><xenc:En cryptedKey><xenc:EncryptionMethod Algorithm=""/><ds:KeyInfo><wsse:SecurityTokenReference><ds:X509Data><ds:X509IssuerSerial><ds:X509IssuerNam e>O=Grid, OU=ARC, CN=CA</ds:X509IssuerName><ds:X509SerialNumber>1</ds:X509SerialNumber></ds:X509IssuerSerial></ds:X509Data></wsse:SecurityTo kenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue/></xenc:CipherData><xenc:ReferenceList><xenc:DataReference URI="#"/></xenc:Refe renceList></xenc:EncryptedKey></wsse:Security></soap-env:Header>  <soap-env:Body>  <xenc:EncryptedData wsu:Id="" Type=""><xenc:CipherData><x enc:CipherValue/></xenc:CipherData></xenc:EncryptedData></soap-env:Body></soap-env:Envelope>
| /bin/bash: line 6: 111469 Segmentation fault      srcdir=. ${dir}$tst
| FAIL: X509TokenTest
|
| .Assertion: <saml2:Assertion xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="ba38a2f6- adbb-4077-8aa4-4e27689c4acd" IssueInstant="2022-02-26T16:08:18Z" Issuer="CN=localhost,OU=ARC,O=Grid" Version="2.0"><saml2:Conditions NotBefo re="2022-02-26T16:08:18Z" NotOnOrAfter="2022-02-27T04:08:18Z"/><saml2:Subject><saml2:NameID NameQualifier="knowarc.eu" Format="urn:oasis:nam es:tc:SAML:1.1:nameid-format:X509SubjectName">CN=localhost,OU=ARC,O=Grid</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc :SAML:2.0:cm:holder-of-key"><saml2:SubjectConfirmationData><ds:KeyInfo><ds:KeyValue>MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYn4VcyApWFw nDXyhSFT
| MUeK5d/TPTk69yvcMIPGyuZmTqD2RosYhPFKcsV//55yvNh7MN0n5fcnKCp88R0p
| Yg/NTE7gHpmKi/ecWzNzk9q6ILcRKcO6w/7Wqgj9j1tK4Qq7V3ZacNG3xMjvFqsj
| W/PzvA/FFr3DoqZ9YKNVoEKO9SGkteVlu7NNjx2VSB9MQJz1/p1jFiiMy6JnoxC7
| UJe3z5JM1Qy7xwfTctLM1tr3y3blUYmpXgMQ/9F5sDbYh5mCoSMq8FT2qxZsm4zj
| B3lYvtUkxoAnZ3juWJV24fkZKSlIMEvXbOOLvLCWqA+RniwUt9FaY8nqy8Nxy5Pk
| 1wIDAQAB</ds:KeyValue></ds:KeyInfo></saml2:SubjectConfirmationData></saml2:SubjectConfirmation></saml2:Subject><saml2:AttributeStatement><sa ml2:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"/></saml2:AttributeStatement><Signature xmlns

For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html

Sebastian

#1006516#14
Date:
2022-05-16 09:54:49 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
nordugrid-arc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006516@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mattias Ellert <mattias.ellert@physics.uu.se> (supplier of updated nordugrid-arc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 13 May 2022 14:06:00 +0200
Source: nordugrid-arc
Architecture: source
Version: 6.15.1-2
Distribution: unstable
Urgency: medium
Maintainer: Mattias Ellert <mattias.ellert@physics.uu.se>
Changed-By: Mattias Ellert <mattias.ellert@physics.uu.se>
Closes: 1006516
Changes:
 nordugrid-arc (6.15.1-2) unstable; urgency=medium
 .
   * Disable xmlsec support (Closes: #1006516)
Checksums-Sha1:
 f46fa65f1fb0119fbfd61e3e859a6260a1bfffc8 4700 nordugrid-arc_6.15.1-2.dsc
 7b5d6b30d3c7089504cac454cf5b7561a167d036 22508 nordugrid-arc_6.15.1-2.debian.tar.xz
 42fada4f181714e541d8c7910eb01e56cfc2ec6b 27329 nordugrid-arc_6.15.1-2_amd64.buildinfo
Checksums-Sha256:
 a9f5ea2edd38e147292fbf439fbffe356e7a6bf06b982f637520773c74fdd36c 4700 nordugrid-arc_6.15.1-2.dsc
 ea895e177fdf2744033513e30e58515015af72fde284e1b0e9bdfea958134fab 22508 nordugrid-arc_6.15.1-2.debian.tar.xz
 ce0c788400bf530e499125bd5ccc9e9914332322687554b8d7e9890584f905a8 27329 nordugrid-arc_6.15.1-2_amd64.buildinfo
Files:
 f66baccb4659f3cf586c3e38bb459d97 4700 net optional nordugrid-arc_6.15.1-2.dsc
 7f13f780b5511be4502e95d4f8202590 22508 net optional nordugrid-arc_6.15.1-2.debian.tar.xz
 47fd5939224b9156ede14c354dcb0117 27329 net optional nordugrid-arc_6.15.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=jnF3
-----END PGP SIGNATURE-----