Bug 795105 – net-libs/libmicrohttpd-0.9.72 fails test_tls_options test

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Paolo Pedroni 2021-06-09 14:53:32 UTC]

Created attachment 714936 [details]
libmicrohttpd-0.9.72:20210609-144308.log.gz

PASS: test_https_get_select
FAIL: test_tls_options
PASS: test_tls_authentication
PASS: test_https_get_parallel
PASS: test_https_get_parallel_threads
PASS: test_https_sni
PASS: test_https_session_info
PASS: test_https_time_out
PASS: test_https_multi_daemon
PASS: test_https_get
PASS: test_empty_response
============================================================================
Testsuite summary for GNU Libmicrohttpd 0.9.72
============================================================================
# TOTAL: 11
# PASS:  10
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0
============================================================================
See src/testcurl/https/test-suite.log
Please report to [e-mail]
============================================================================

# cat /var/tmp/portage/net-libs/libmicrohttpd-0.9.72/work/libmicrohttpd-0.9.72-abi_x86_64.amd64/src/testcurl/https/test-suite.log
=================================================================
   GNU Libmicrohttpd 0.9.72: src/testcurl/https/test-suite.log
=================================================================

# TOTAL: 11
# PASS:  10
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: test_tls_options
======================

curl version: libcurl/7.77.0 GnuTLS/3.7.1 zlib/1.2.11 brotli/1.0.9 zstd/1.4.9 libidn2/2.3.0 libssh2/1.9.0_DEV nghttp2/1.41.0 librtmp/2.3
The following handshake should fail (and print an error message)...
cURL failed to reject request despite SSL version mismatch!
TLS1.0 vs SSL3 test failed
FAIL test_tls_options (exit status: 1)

# emerge --info =net-libs/libmicrohttpd-0.9.72
Portage 3.0.18 (python 3.9.4-final-0, default/linux/amd64/17.1/desktop, gcc-10.3.0, glibc-2.33, 5.10.27-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-5.10.27-gentoo-x86_64-AMD_Phenom-tm-_II_X4_965_Processor-with-glibc2.33
KiB Mem:     8138876 total,   4536540 free
KiB Swap:    8351740 total,   7852904 free
Timestamp of repository gentoo: Mon, 07 Jun 2021 07:15:01 +0000
Head commit of repository gentoo: 88e9b7fa870662cdd4ca30f00690b8c9f33b868d
sh dash 0.5.11.3-r1
ld GNU gold (Gentoo 2.35.2 p1 2.35.2) 1.16
distcc 3.3.3 x86_64-pc-linux-gnu [enabled]
ccache version 4.2.1 [disabled]
app-shells/bash:          5.1_p8::gentoo
dev-java/java-config:     2.3.1::gentoo
dev-lang/perl:            5.32.1::gentoo
dev-lang/python:          3.9.4_p1::gentoo
dev-lang/rust:            1.51.0-r2::gentoo
dev-util/ccache:          4.2.1::gentoo
dev-util/cmake:           3.18.5::gentoo
sys-apps/baselayout:      2.7::gentoo
sys-apps/sandbox:         2.24::gentoo
sys-devel/autoconf:       2.13-r1::gentoo, 2.69-r5::gentoo
sys-devel/automake:       1.16.3-r1::gentoo
sys-devel/binutils:       2.35.2::gentoo
sys-devel/gcc:            10.3.0::gentoo
sys-devel/gcc-config:     2.4::gentoo
sys-devel/libtool:        2.4.6-r6::gentoo
sys-devel/make:           4.3::gentoo
sys-kernel/linux-headers: 5.10::gentoo (virtual/os-headers)
sys-libs/glibc:           2.33::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.europe.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-max-age: 24
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts: 
    sync-rsync-verify-metamanifest: yes

x-portage
    location: /usr/local/portage
    masters: gentoo
    priority: 0

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -frecord-gcc-switches -march=amdfam10 -flto=4"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe -frecord-gcc-switches -march=amdfam10 -flto=4"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--keep-going y --with-bdeps y"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-O2 -pipe -frecord-gcc-switches -march=amdfam10 -flto=4"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs cgroup compress-build-logs config-protect-if-modified distcc distlocks ebuild-locks ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms split-elog split-log strict test unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe -frecord-gcc-switches -march=amdfam10 -flto=4"
GENTOO_MIRRORS="http://mirror.leaseweb.com/gentoo/ http://mirror.init7.net/gentoo/ https://mirror.init7.net/gentoo/ http://ftp.uni-hannover.de/gentoo/"
LANG="it_IT.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -Wl,--sort-common -flto=4"
LINGUAS="it it_IT"
MAKEOPTS="-j12 -l4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="3dnow X a52 aac aalib acl acpi alsa amd64 ao audiofile bash-completion bluetooth branding brotli bzip2 cairo caps cdda cddb cdparanoia cdr cli crypt css cups curl dbus dga djvu dri dts dvd dvdr emboss encode exif expat fbcon ffmpeg fftw flac fontconfig fortran ftp gd gdbm gif gmp gnutls gpm graphviz gtk gui iconv icu idn ieee1394 imagemagick imlib inotify introspection ipv6 java jbig jemalloc jpeg jpeg2k kde lame lcms libass libglvnd libnotify libsamplerate libtirpc lm_sensors lua lzma lzo mad magic mmap mng mp3 mp4 mpeg mplayer multilib musicbrainz ncurses nls nptl nsplugin offensive ogg openal opengl openmp pam pango pch pcre pdf png policykit postscript ppds pulseaudio qt5 rdesktop readline samba sctp sdl seccomp sndfile speex spell split-usr sqlite ssl startup-notification svg symlink syslog systemd taglib test theora threads tiff truetype udev udisks unicode upower usb vaapi vala vdpau verify-sig vim-syntax vorbis wavpack wayland win32codecs wmf wxwidgets x264 xattr xcb xcomposite xine xinerama xml xpm xscreensaver xv xvid zlib zstd" ABI_X86="64" ADA_TARGET="gnat_2018" ALSA_CARDS="hda-intel virmidi" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" CURL_SSL="gnutls" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="libinput" KERNEL="linux" L10N="it en" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-3 php7-4" POSTGRES_TARGETS="postgres10 postgres11" PYTHON_SINGLE_TARGET="python3_9" PYTHON_TARGETS="python3_9" RUBY_TARGETS="ruby26" USERLAND="GNU" VIDEO_CARDS="radeon r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RUSTFLAGS

=================================================================
                        Package Settings
=================================================================

net-libs/libmicrohttpd-0.9.72::gentoo was built with the following:
USE="epoll ssl test -static-libs -thread-names" ABI_X86="(64) -32 (-x32)"

# emerge -1pqv =net-libs/libmicrohttpd-0.9.72
[ebuild   R   ] net-libs/libmicrohttpd-0.9.72  USE="epoll ssl test -static-libs -thread-names" ABI_X86="(64) -32 (-x32)"

[Comment 1 Karlson2k 2021-06-10 07:31:32 UTC]

Please, add info about curl and GnuTLS.

# emerge -1pv net-libs/gnutls net-misc/curl


Looks like latest GnuTLS versions silently converts SSL3.0 requests to TLSv1.0.

[Comment 2 Larry the Git Cow 2021-06-10 18:39:24 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=776f3c282674288ce9ea8369bc06e7b8f0d452e4

commit 776f3c282674288ce9ea8369bc06e7b8f0d452e4
Author:     Karlson2k (Evgeny Grin) <[e-mail]>
AuthorDate: 2021-06-10 18:31:55 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2021-06-10 18:39:16 +0000

    net-libs/libmicrohttpd: fixed testing
    
    Closes: https://bugs.gentoo.org/795105
    Signed-off-by: Karlson2k (Evgeny Grin) <[e-mail]>
    Closes: https://github.com/gentoo/gentoo/pull/21191
    Signed-off-by: Sam James <[e-mail]>

 .../files/libmicrohttpd-0.9.73-test-ssl3.patch     | 35 ++++++++++++++++++++++
 .../libmicrohttpd/libmicrohttpd-0.9.68-r1.ebuild   |  2 ++
 net-libs/libmicrohttpd/libmicrohttpd-0.9.72.ebuild |  2 ++
 net-libs/libmicrohttpd/libmicrohttpd-0.9.73.ebuild |  2 ++
 4 files changed, 41 insertions(+)

[Comment 3 Karlson2k 2021-06-11 06:41:38 UTC]

Paolo Pedroni, please confirm that issue is fixed for you.

[Comment 4 Paolo Pedroni 2021-06-11 09:59:49 UTC]

(In reply to Karlson2k from comment #3)
> Paolo Pedroni, please confirm that issue is fixed for you.

Issue fixed, thank you!