Bug#1007740: curl breaks xmltooling autopkgtest

2022-03-15 Thread Cantor, Scott
On 3/15/22, 8:08 PM, "Daniel Stenberg" wrote: >This is probably the same issue as Bug #1007739. Triggered by a bug in > curl >for CN-only certificates: Ah, probably is. This vhost does use a self-signed cert with a CN only, not Let's Encrypt, and I can't think why else it would be

Bug#1007740: curl breaks xmltooling autopkgtest

2022-03-15 Thread Daniel Stenberg
On Tue, 15 Mar 2022, Cantor, Scott wrote: Looking more closely, I'm going to hope curl is at fault and that this is actually "just" a CA list issue. This is probably the same issue as Bug #1007739. Triggered by a bug in curl for CN-only certificates:

Bug#1007740: curl breaks xmltooling autopkgtest

2022-03-15 Thread Cantor, Scott
I would speculate that this isn't caused by curl, but by openssl bumping. I reproduced the test failure on a Mac, and the change log for openssl 3.0.2 includes a very suspicious incompatible change to a critical function. I need to dig into it, and I don't know when that will be at this point.

Bug#1007740: curl breaks xmltooling autopkgtest

2022-03-15 Thread Cantor, Scott
Looking more closely, I'm going to hope curl is at fault and that this is actually "just" a CA list issue. It's very unusual for any of this code to rely on "default" trust store handling but I'm wondering if this code is tripping on that for some reason. If so, it's likely due to the Let's

Bug#1007740: curl breaks xmltooling autopkgtest

2022-03-15 Thread Paul Gevers
Source: curl, xmltooling Control: found -1 curl/7.82.0-1 Control: found -1 xmltooling/3.2.1-1 Severity: serious Tags: sid bookworm User: debian...@lists.debian.org Usertags: breaks needs-update Dear maintainer(s), With a recent upload of curl the autopkgtest of xmltooling fails in testing when