Small update: with Ubuntu 18.04 + "OpenSSL 1.1.1-1ubuntu2.1~18.04.21",
also older versions of naviserver do not work (went back until 4.99.20,
jan 2021).
so, in case this is really needed, it requires detailed debugging, including
comparing the results of OpenSSL API calls.
-gn
On 09.03.23 12:27, Gustaf Neumann wrote:
On 08.03.23 21:52, Andrew Piskorski wrote:
Building the NaviServer head (latest code from 2023-03-02), I'm
getting two "make test" failures, both from aead::encrypt (below).
Any advice for me on what the problem might be,
My first suspicion is the version of OpenSSL in use. OpenSSL is a
moving target.
If i see correctly, there is a version "1.1.1-1ubuntu2.1~18.04.21" in
place for
Ubuntu 18.04 will all updates. It this what you are using?
Options:
- Upgrade of OpenSSL (i have just tested an installation with 18.04 +
OpenSSL 3)
- Upgrade of Ubuntu (18.04 is not the youngest)
- Downgrade of NaviServer: there were changes between NaviServer
4.99.23 and .24
concerning support of OpenSSL 3.0 - using newer API calls - so maybe
these newer API calls are available in this version of OpenSSL, but
not fully functioning yet.
... and of course, provide a fix to "make it work" also in your
combination.
-gn
or how I should
further track it down? (Thanks!)
This is on an old Ubuntu 18.04.4 LTS machine, using gcc 8.4.0, and Tcl
8.6.13. My built-from-source Tcl includes nsf 2.4.0, Thread 2.8.9,
tdom 0.9.3, and tcllib 1.20.
## Excerpts from "make test" output:
[08/Mar/2023:15:23:16][11421.7f2097bfc700][-command-] Notice:
SSL_shutdown(33) has failed: error:14094123:SSL
routines:ssl3_read_bytes:application data after close notify
ns_crypt.test
ns_crypto.test
==== aead-1.0 aead::encrypt FAILED
---- Result was:
bytes 0 tag 32
---- Result should have been (exact matching):
bytes 22 tag 32
==== aead-1.0 FAILED
==== aead-1.1 aead::encrypt and decrypt FAILED
---- Test generated error; Return code was: 1
---- Return code should have been one of: 0 2
==== aead-1.1 FAILED
Tests ended at Wed Mar 08 15:24:13 EST 2023
all.tcl: Total 1998 Passed 1971 Skipped 25 Failed 2
Sourced 71 Test Files.
Files with failing tests: ns_driver.test
Number of tests skipped for each constraint:
19 !usingExternalToUtf
2 binaryMismatch
1 copyAliasBug
2 knownBug
1 stress
Makefile:236: recipe for target 'test' failed
make: *** [test] Error 130
--
Univ.Prof. Dr. Gustaf Neumann
Head of the Institute of Information Systems and New Media
of Vienna University of Economics and Business
Program Director of MSc "Information Systems"
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
