#1057357 qtremoteobjects-everywhere-src: FTBFS in bullseye and bookworm because of expired SSL certificates, will also FTBFS in trixie/sid eventually #1057357
- Package:
- src:qtremoteobjects-everywhere-src
- Submitter:
- Santiago Vila
- Date:
- 2023-12-14 09:51:09 UTC
- Severity:
- normal
- Tags:
Dear maintainer:
During an archive rebuild of all packages in bookworm,
this package failed to build:
make[4]: Entering directory '/<<PKGBUILDDIR>>/tests/auto/external_IODevice/tst_client'
/<<PKGBUILDDIR>>/tests/auto/external_IODevice/tst_client/target_wrapper.sh ./tst_external_IODevice
********* Start testing of tst_clientSSL *********
Config: Using QtTest library 5.15.8, Qt 5.15.8 (x86_64-little_endian-lp64 shared (dynamic) release build; by GCC 12.2.0), debian 12
PASS : tst_clientSSL::initTestCase()
FAIL! : tst_clientSSL::testRun() 'socketClient->waitForEncrypted(-1)' returned FALSE. ()
Loc: [tst_client.cpp(77)]
QWARN : tst_clientSSL::testRun() QProcess: Destroyed while process ("/<<PKGBUILDDIR>>/tests/auto/external_IODevice/sslTestServer/sslTestServer") is still running.
PASS : tst_clientSSL::cleanupTestCase()
Totals: 2 passed, 1 failed, 0 skipped, 0 blacklisted, 267ms
********* Finished testing of tst_clientSSL *********
make[4]: *** [Makefile:356: check] Error 1
make[4]: Leaving directory '/<<PKGBUILDDIR>>/tests/auto/external_IODevice/tst_client'
make[3]: *** [Makefile:431: sub-tst_client-check_ordered] Error 2
make[3]: Leaving directory '/<<PKGBUILDDIR>>/tests/auto/external_IODevice'
make[2]: *** [Makefile:1329: sub-external_IODevice-check] Error 2
make[2]: Leaving directory '/<<PKGBUILDDIR>>/tests/auto'
dh_auto_test: error: make -j1 check -Ctests/auto LD_LIBRARY_PATH=/<<PKGBUILDDIR>>/lib QML2_IMPORT_PATH=/<<PKGBUILDDIR>>/test_root/usr/lib/x86_64-linux-gnu/qt5/qml returned exit code 2
make[1]: *** [debian/rules:31: override_dh_auto_test-arch] Error 25
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
make: *** [debian/rules:11: build-arch] Error 2
dpkg-buildpackage: error: debian/rules build-arch subprocess returned exit status 2
You can get a full build log from reproducible builds:
https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/qtremoteobjects-everywhere-src.html
This happens because the SSL certificates in the tests have expired.
This can be checked by doing this:
cd tests/auto/external_IODevice/cert
for a in *; do openssl x509 -noout -enddate -in $a; done
The output from bookworm contains this:
notAfter=May 30 11:33:55 2023 GMT
notAfter=Jun 10 11:33:55 2023 GMT
notAfter=May 30 11:33:55 2023 GMT
and the output for bullseye (where it also fails) contains this:
notAfter=Jul 2 09:32:51 2023 GMT
notAfter=Jul 2 09:32:50 2023 GMT
notAfter=Jul 2 09:32:51 2023 GMT
I'm attaching two patches to fix this.
The first one modifies the script tests/auto/external_IODevice/cert/generate.sh
so that certificates expire in ten years.
The second patch is merely the result of running the script.
Note: The patches are relative to the version in trixie/sid,
where this problem should be fixed first.
Thanks.
Hi Santiago! Generally, we try to avoid including patches which have not been applied upstream. And upstream has solved this problem by simply regenerating the patches with the old configuration [1]. So I have forwarded your first patch to upstream [2] to give them chance to review it. If it's approved/merged, I will submit your second patch to regenerate the certificates again (I hope you don't mind). If there is no response from upstream, I will go ahead and make uploads with both patches in a week. [1]: https://code.qt.io/cgit/qt/qtremoteobjects.git/commit/?id=ac3b93c886c04bc1 [2]: https://codereview.qt-project.org/c/qt/qtremoteobjects/+/522923
Hello, Bug #1057357 in qtremoteobjects-everywhere-src reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/qt-kde-team/qt/qtremoteobjects/-/commit/882ef0c6c964fc2fec6162b6ddfb4a488a7b10bc ------------------------------------------------------------------------ Regenerate the test certificates with a longer validity period. Thanks Santiago Vila! Closes: #1057357. ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1057357
We believe that the bug you reported is fixed in the latest version of
qtremoteobjects-everywhere-src, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1057357@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dmitry Shachnev <mitya57@debian.org> (supplier of updated qtremoteobjects-everywhere-src package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 09 Dec 2023 18:06:17 +0300
Source: qtremoteobjects-everywhere-src
Architecture: source
Version: 5.15.10-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Closes: 1047190 1057357
Changes:
qtremoteobjects-everywhere-src (5.15.10-3) unstable; urgency=medium
.
* Regenerate the certificates used in tests and examples with a longer
validity period (closes: #1057357, thanks Santiago Vila).
* Improve debian/clean file (closes: #1047190).
Checksums-Sha1:
788ce5d393378971697993a67cfab9a6c1dff6b9 3172 qtremoteobjects-everywhere-src_5.15.10-3.dsc
383a2a6dd6c8594c12c388270718409b79d8b7b1 19492 qtremoteobjects-everywhere-src_5.15.10-3.debian.tar.xz
9653616c6997e5f023a7fa4053b22542faa87f8c 12347 qtremoteobjects-everywhere-src_5.15.10-3_source.buildinfo
Checksums-Sha256:
e969982b82f1fe5e211839192722d2386dda4cc8e0f990e0d9d2446651ef6bfb 3172 qtremoteobjects-everywhere-src_5.15.10-3.dsc
ad43f571fa1688e5a5f232ef7de27f3be7ccf4d3a3fd1731f9d6095f422ee0a1 19492 qtremoteobjects-everywhere-src_5.15.10-3.debian.tar.xz
42cd63160637aa64fc83610d7eb3185dda08744c788a39a1a3cdb97e74f07aa1 12347 qtremoteobjects-everywhere-src_5.15.10-3_source.buildinfo
Files:
7331b43c6bf98a955f976ad924d13047 3172 libs optional qtremoteobjects-everywhere-src_5.15.10-3.dsc
75b3f175d64c84ee76d2c908c7294814 19492 libs optional qtremoteobjects-everywhere-src_5.15.10-3.debian.tar.xz
557d29b04b4ddad6bb61ac7661193312 12347 libs optional qtremoteobjects-everywhere-src_5.15.10-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCgAxFiEEq2sdvrA0LydXHe1qsmYUtFL0RrYFAmV0g7cTHG1pdHlhNTdA
ZGViaWFuLm9yZwAKCRCyZhS0UvRGtlCQEACiHi3nGBzVPML9OjW9F1y87upPM8Lo
q/RXs3jtYpE3YANQ73e3DJKXAMsN6hjW3Lj7c7+1PC04KWyfqS5qhEXqb6Qkj4Vn
8NDdEPDkbI3niRI1tNKKtudPvhNJq3nyogngQMVlNru7+hVK6/8BoCwSicsMZwq0
Iz1i6esGyXMP4otbZxr0vjkmiHCkKvUYmrBIcUxGeU5+oXO2VehX3UOq+xmbrq90
HnIULrk7GMoue0D34SZvy6zf1C1p4I2l/JA4Pdii9aJNWNVY7gFNCCFZWlFU9TA0
1lxZI529N7BBFy/AhE93kzVtEvXW27fM57LJnV7/K37u4Mdn2pkQ+sIeSiQkNqjw
VyxtQKvmABcP7j6sh5fX59QX89WlqBt3LABXMKjQWmwsSTgS91GZtMU+ICqPD+9B
Kn+x+293vGXRnex892uyHaVlfRqgH6QjRZnY3c7BD1tNfZ22PKWHQBOrOiRc9HR9
cfSAHrFl4b/Iu0/jUuvnAGOHVxwNu1UIMaIJfeWsNfNYcsY7HYriThZigGB8r70r
9Xio5Man1ZYn+M3JJUaJytcCfHEQwFEZg9oyBGfiO9tuBJmMFMxXUeJn6kDCVDIs
OdDD0Q2go+8JmmRI/1oF65yutyGr/VaTC7WoqjbBxG71Pc2kM8nGtJ5KQ2RP4xZ1
7h84FZlM2kfHlA==
=D4aG
-----END PGP SIGNATURE-----