Bug 922143 – sys-auth/oath-toolkit-2.6.9 fails tests on 32-bit: pskctool: verifying PSKC data: error returned from XMLSec library

• Status: CONFIRMED
• Product: Gentoo Linux

[Description matoro 2024-01-15 01:44:59 UTC]

Sample from x86, but this reproduces on arm also, so presumably all 32-bit.

==========================================
   pskctool 2.6.9: tests/test-suite.log
==========================================
 
# TOTAL: 5
# PASS:  4
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0
 
.. contents:: :depth: 2
 
FAIL: tst_sign.sh
=================
 
func=xmlSecOpenSSLVerifyAndAdoptX509KeyData:file=x509.c:line=1637:obj=x509:subj=xmlSecOpenSSLX509Asn1TimeToTime(notValidAfter):error=1:xmlsec library function failed: 
func=xmlSecOpenSSLKeyDataX509XmlRead:file=x509.c:line=694:obj=x509:subj=xmlSecOpenSSLVerifyAndAdoptX509KeyData:error=1:xmlsec library function failed: 
func=xmlSecKeyInfoNodeRead:file=keyinfo.c:line=122:obj=x509:subj=xmlSecKeyDataXmlRead:error=1:xmlsec library function failed:node=X509Data
func=xmlSecKeysMngrGetKey:file=keys.c:line=1319:obj=unknown:subj=xmlSecKeyInfoNodeRead:error=1:xmlsec library function failed:node=KeyInfo
func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=822:obj=unknown:subj=unknown:error=45:key is not found:details=NULL
func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=537:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec library function failed: 
func=xmlSecDSigCtxVerify:file=xmldsig.c:line=357:obj=unknown:subj=xmlSecDSigCtxProcessSignatureNode:error=1:xmlsec library function failed: 
pskctool: verifying PSKC data: error returned from XMLSec library
FAIL tst_sign.sh (exit status: 1)

Reproducible: Always

[Comment 1 matoro 2024-01-15 01:46:53 UTC]

Created attachment 882302 [details]
build.log and emerge --info

[Comment 2 Sam James 2024-01-16 02:35:23 UTC]

Is 2.6.11 any better?

[Comment 3 Sam James 2024-01-16 02:38:33 UTC]

Also, could you share emerge -pvO xmlsec

[Comment 4 matoro 2024-01-16 02:42:30 UTC]

(In reply to Sam James from comment #2)
> Is 2.6.11 any better?

Nope, still present on 2.6.11.

(In reply to Sam James from comment #3)
> Also, could you share emerge -pvO xmlsec

# emerge -pvO dev-libs/xmlsec

Local copy of remote index is up-to-date and will be used.

Local copy of remote index is up-to-date and will be used.

These are the packages that would be merged, in order:

[ebuild   R    ] dev-libs/xmlsec-1.3.2:0/1.3::gentoo  USE="openssl -doc -gcrypt -gnutls -http -nss -static-libs -test" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB

[Comment 5 Sam James 2024-01-16 03:27:03 UTC]

do xmlsec tests pass?

[Comment 6 matoro 2024-01-16 03:32:55 UTC]

(In reply to Sam James from comment #5)
> do xmlsec tests pass?

Nope, I see the same call trace there.  I'm going to pre-emptively say same issue.