Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-sock

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-sock

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-crl2pkcs7.pod.in > doc/man1/openssl-crl2pkcs7.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dgst.pod.in > doc/man1/openssl-dgst.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dhparam.pod.in > doc/man1/openssl-dhparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-dsa.pod.in 
> doc/man1/openssl-dsa.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dsaparam.pod.in > doc/man1/openssl-dsaparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-ec.pod.in 
> doc/man1/openssl-ec.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-ecparam.pod.in > doc/man1/openssl-ecparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-enc.pod.in 
> doc/man1/openssl-enc.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-engine.pod.in > doc/man1/openssl-engine.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-errstr.pod.in > doc/man1/openssl-errstr.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-fipsinstall.pod.in > 
doc/man1/openssl-fipsinstall.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-gendsa.pod.in > doc/man1/openssl-gendsa.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-genpkey.pod.in > doc/man1/openssl-genpkey.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" 

Build failed: openssl master.37253

2020-09-28 Thread AppVeyor



Build openssl master.37253 failed


Commit 5e26c3399d by Dr. David von Oheimb on 9/28/2020 1:51 PM:

30-test_evp.t: On no-dh, no-dsa, no-ec, no-sm2, and no-gost configurations disable respective tests


Configure your notification preferences



Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-rc2

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-rc2

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . ok
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok

Could not read any certificates from -in file from 
../../../openssl/test/certs/v3-certs-RC2.p12
C090932A3A7F:error::digital envelope routines:EVP_PBE_CipherInit:unknown 
cipher:../openssl/crypto/evp/evp_pbe.c:116:RC2-40-CBC
../../util/wrap.pl ../../apps/openssl pkcs12 -export -in 
../../../openssl/test/certs/v3-certs-RC2.p12 -passin 'pass:v3-certs' -provider 
default -provider legacy -nokeys -passout 'pass:v3-certs' -descert -out tmp.p12 
=> 1
not ok 5 - test_pkcs12_passcert
# --
#   Failed test 'test_pkcs12_passcert'
#   at ../openssl/test/recipes/80-test_pkcs12.t line 93.
# Looks like you failed 1 test of 5.80-test_pkcs12.t ... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/5 subtests 
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-posix-io

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-posix-io

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-crl2pkcs7.pod.in > doc/man1/openssl-crl2pkcs7.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dgst.pod.in > doc/man1/openssl-dgst.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dhparam.pod.in > doc/man1/openssl-dhparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-dsa.pod.in 
> doc/man1/openssl-dsa.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-dsaparam.pod.in > doc/man1/openssl-dsaparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-ec.pod.in 
> doc/man1/openssl-ec.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-ecparam.pod.in > doc/man1/openssl-ecparam.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" ../openssl/doc/man1/openssl-enc.pod.in 
> doc/man1/openssl-enc.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-engine.pod.in > doc/man1/openssl-engine.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-errstr.pod.in > doc/man1/openssl-errstr.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-fipsinstall.pod.in > 
doc/man1/openssl-fipsinstall.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-gendsa.pod.in > doc/man1/openssl-gendsa.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" "-oMakefile" 
../openssl/doc/man1/openssl-genpkey.pod.in > doc/man1/openssl-genpkey.pod
/usr/bin/perl "-I." "-I../openssl/doc" -Mconfigdata -Mperlvars 
"../openssl/util/dofile.pl" 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-pic

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-pic

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

$ CC=clang ../openssl/config -d --strict-warnings no-pic
Configuring OpenSSL version 3.0.0-alpha7-dev for target linux-x86_64
Using os-specific seed configuration
md5-x86_64.o appears 2 times for the product libcrypto
md5_sha1.o appears 2 times for the product libcrypto
md5_one.o appears 2 times for the product libcrypto
md5_dgst.o appears 2 times for the product libcrypto

Failure!  Makefile wasn't produced.
Please read INSTALL.md and associated NOTES-* files.  You may also have to
look over your available compiler tool chain or change your configuration.

Died at ../openssl/Configure line 2428.


Build failed: openssl master.37252

2020-09-28 Thread AppVeyor



Build openssl master.37252 failed


Commit 92ee4574ac by rcombs on 9/28/2020 9:16 PM:

crypto: use _os_crash on macOS >= 10.11 and iOS >= 9.0


Configure your notification preferences



Errored: openssl/openssl#37789 (master - 5e26c33)

2020-09-28 Thread Travis CI
Build Update for openssl/openssl
-

Build: #37789
Status: Errored

Duration: 1 hr, 22 mins, and 14 secs
Commit: 5e26c33 (master)
Author: Dr. David von Oheimb
Message: 30-test_evp.t: On no-dh, no-dsa, no-ec, no-sm2, and no-gost 
configurations disable respective tests

Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/13022)

View the changeset: 
https://github.com/openssl/openssl/compare/53c4992e0b1c...5e26c3399d15

View the full build log and details: 
https://travis-ci.com/github/openssl/openssl/builds/187088516?utm_medium=notification_source=email


--

You can unsubscribe from build emails from the openssl/openssl repository going 
to 
https://travis-ci.com/account/preferences/unsubscribe?repository=13885459_medium=notification_source=email.
Or unsubscribe from *all* email updating your settings at 
https://travis-ci.com/account/preferences/unsubscribe?utm_medium=notification_source=email.
Or configure specific recipients for build notifications in your .travis.yml 
file. See https://docs.travis-ci.com/user/notifications.



[openssl] master update

2020-09-28 Thread Dr . Paul Dale
The branch master has been updated
   via  5e26c3399d154b9ed29558129ca1916a1b5b095e (commit)
   via  e6a2596cdcb0137e268517f4ce01254b3cba8017 (commit)
  from  53c4992e0b1c79bdf5904b84e77ca7d362cc4af0 (commit)


- Log -
commit 5e26c3399d154b9ed29558129ca1916a1b5b095e
Author: Dr. David von Oheimb 
Date:   Mon Sep 28 10:57:00 2020 +0200

30-test_evp.t: On no-dh, no-dsa, no-ec, no-sm2, and no-gost configurations 
disable respective tests

Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/13022)

commit e6a2596cdcb0137e268517f4ce01254b3cba8017
Author: Dr. David von Oheimb 
Date:   Mon Sep 28 14:16:30 2020 +0200

appveyor.yml: Clean up minimal configuration, adding no-ec and pruning 
cascaded no-*

Reviewed-by: Paul Dale 
(Merged from https://github.com/openssl/openssl/pull/13022)

---

Summary of changes:
 appveyor.yml   |  2 +-
 test/recipes/30-test_evp.t | 25 -
 2 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/appveyor.yml b/appveyor.yml
index ccca8bb22c..3ac6d12e26 100644
--- a/appveyor.yml
+++ b/appveyor.yml
@@ -34,7 +34,7 @@ before_build:
 If ($env:Configuration -Match "shared") {
 $env:SHARED="no-makedepend"
 } ElseIf ($env:Configuration -Match "minimal") {
-$env:SHARED="no-shared no-dso no-makedepend no-aria no-async 
no-autoload-config no-blake2 no-bf no-camellia no-cast no-chacha no-cmac no-cms 
no-cmp no-comp no-ct no-des no-dgram no-dh no-dsa no-dtls no-ec2m no-engine 
no-filenames no-gost no-idea no-ktls no-mdc2 no-md4 no-multiblock 
no-nextprotoneg no-ocsp no-ocb no-poly1305 no-psk no-rc2 no-rc4 no-rmd160 
no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-srp no-srtp no-ssl3 
no-ssl3-method no-ts no-ui-console no-whirlpool no-asm 
-DOPENSSL_SMALL_FOOTPRINT"
+$env:SHARED="no-shared no-dso no-makedepend no-aria no-async 
no-autoload-config no-blake2 no-bf no-camellia no-cast no-chacha no-cmac no-cms 
no-cmp no-comp no-ct no-des no-dgram no-dh no-dsa no-ec no-ec2m no-engine 
no-filenames no-idea no-ktls no-md4 no-multiblock no-nextprotoneg no-ocsp 
no-ocb no-poly1305 no-psk no-rc2 no-rc4 no-rmd160 no-seed no-siphash no-siv 
no-sm3 no-sm4 no-srp no-srtp no-ssl3-method no-ts no-ui-console no-whirlpool 
no-asm -DOPENSSL_SMALL_FOOTPRINT"
 } Else {
 $env:SHARED="no-shared no-makedepend"
 }
diff --git a/test/recipes/30-test_evp.t b/test/recipes/30-test_evp.t
index 4d9e9fd372..17e2d17007 100644
--- a/test/recipes/30-test_evp.t
+++ b/test/recipes/30-test_evp.t
@@ -23,6 +23,11 @@ use platform;
 
 my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
 my $no_legacy = disabled('legacy') || ($ENV{NO_LEGACY} // 0);
+my $no_dh = disabled("dh");
+my $no_dsa = disabled("dsa");
+my $no_ec = disabled("ec");
+my $no_gost = disabled("gost");
+my $no_sm2 = disabled("sm2");
 
 # Default config depends on if the legacy module is built or not
 my $defaultcnf = $no_legacy ? 'default.cnf' : 'default-and-legacy.cnf';
@@ -46,18 +51,20 @@ my @files = qw(
 evpmac_common.txt
 evpmd_sha.txt
 evppbe_pbkdf2.txt
-evppkey_dsa.txt 
+evppkey_kdf_hkdf.txt
+evppkey_rsa_common.txt
+evprand.txt
+  );
+push @files, qw(evppkey_ffdhe.txt) unless $no_dh;
+push @files, qw(evppkey_dsa.txt) unless $no_dsa;
+push @files, qw(evppkey_ecx.txt) unless $no_ec;
+push @files, qw(
 evppkey_ecc.txt
 evppkey_ecdh.txt
 evppkey_ecdsa.txt
-evppkey_ecx.txt
-evppkey_ffdhe.txt
 evppkey_kas.txt
-evppkey_kdf_hkdf.txt
 evppkey_mismatch.txt
-evppkey_rsa_common.txt
-evprand.txt
-  );
+  ) unless $no_ec || $no_gost;
 
 # A list of tests that only run with the default provider
 # (i.e. The algorithms are not present in the fips provider)
@@ -93,12 +100,12 @@ my @defltfiles = qw(
  evpmd_whirlpool.txt
  evppbe_scrypt.txt
  evppbe_pkcs12.txt
- evppkey_brainpool.txt
  evppkey_kdf_scrypt.txt
  evppkey_kdf_tls1_prf.txt
  evppkey_rsa.txt
- evppkey_sm2.txt
 );
+push @defltfiles, qw(evppkey_brainpool.txt) unless $no_ec;
+push @defltfiles, qw(evppkey_sm2.txt) unless $no_sm2;
 
 plan tests =>
 ($no_fips ? 0 : 1)  # FIPS install test


Still FAILED build of OpenSSL branch master with options -d enable-fuzz-afl no-shared no-module

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=afl-clang-fast ../openssl/config -d enable-fuzz-afl no-shared no-module

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

$ CC=afl-clang-fast ../openssl/config -d enable-fuzz-afl no-shared no-module
Configuring OpenSSL version 3.0.0-alpha7-dev for target linux-x86_64
Using os-specific seed configuration
md5_sha1.o appears 2 times for the product libcrypto
md5_dgst.o appears 2 times for the product libcrypto
md5_one.o appears 2 times for the product libcrypto
md5-x86_64.o appears 2 times for the product libcrypto

Failure!  Makefile wasn't produced.
Please read INSTALL.md and associated NOTES-* files.  You may also have to
look over your available compiler tool chain or change your configuration.

Died at ../openssl/Configure line 2428.


Build failed: openssl master.37245

2020-09-28 Thread AppVeyor



Build openssl master.37245 failed


Commit 4d8be5c166 by Dr. David von Oheimb on 9/28/2020 6:45 AM:

fixup! bss_file.c: Make file_gets() and thus BIO_gets() support binary input


Configure your notification preferences



Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-ui-console

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ui-console

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

#   Failed test 'p10cr csr non-existing file'
#   at ../openssl/test/recipes/81-test_cmp_cli.t line 184.
../../../../../no-ui-console/util/wrap.pl 
../../../../../no-ui-console/apps/openssl cmp -config ../Mock/test.cnf -section 
'Mock enrollment' -proxy '' -no_proxy 127.0.0.1 -cmd p10cr -newkey new.key 
-newkeypass 'pass:' -certout test.certout_p10cr4.pem -out_trusted root.crt -csr 
empty.txt => 139
not ok 78 - p10cr csr empty file
# --
#   Failed test 'p10cr csr empty file'
#   at ../openssl/test/recipes/81-test_cmp_cli.t line 184.
../../../../../no-ui-console/util/wrap.pl 
../../../../../no-ui-console/apps/openssl cmp -config ../Mock/test.cnf -section 
'Mock enrollment' -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key 
-newkeypass 'pass:' -certout test.certout_revreason.pem -out_trusted root.crt 
-revreason 5 => 139
not ok 79 - ir + ignored revocation
# --
../../../../../no-ui-console/util/wrap.pl 
../../../../../no-ui-console/apps/openssl cmp -config ../Mock/test.cnf -section 
'Mock enrollment' -proxy '' -no_proxy 127.0.0.1 -cmd cr -newkey new.key 
-newkeypass 'pass:' -certout test.certout_cr.pem -out_trusted root.crt => 139
not ok 82 - cr
# --
#   Failed test 'cr'
#   at ../openssl/test/recipes/81-test_cmp_cli.t line 184.
../../../../../no-ui-console/util/wrap.pl 
../../../../../no-ui-console/apps/openssl cmp -config ../Mock/test.cnf -section 
'Mock enrollment' -proxy '' -no_proxy 127.0.0.1 -cmd kur -newkey new.key 
-newkeypass 'pass:' -certout test.certout_kur.pem -out_trusted root.crt 
-oldcert test.certout_newkey.pem -server '127.0.0.1:1700' -cert 
test.certout_newkey.pem -key new.key -extracerts issuing.crt => 139
not ok 83 - kur explicit options
# --
#   Failed test 'kur explicit options'
#   at ../openssl/test/recipes/81-test_cmp_cli.t line 184.
../../../../../no-ui-console/util/wrap.pl 
../../../../../no-ui-console/apps/openssl cmp -config ../Mock/test.cnf -section 
'Mock enrollment' -proxy '' -no_proxy 127.0.0.1 -cmd kur -subject "" -certout 
test.certout_kur_minimal.pem -oldcert "" -server 

Build failed: openssl master.37244

2020-09-28 Thread AppVeyor



Build openssl master.37244 failed


Commit 1c6c9213b0 by Dr. David von Oheimb on 9/28/2020 10:01 AM:

openssl-cmp.pod.in: Clean up doc of -verify_email, -verify_hostname, and -verify_ip


Configure your notification preferences



Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-err

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-err

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . ok
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-engine

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-engine

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic 
-certs -noout ../../../../openssl/test/testx509.pem => 1
not ok 409 - Checking that -certs returns 1 object on a certificate file
# --
#   Failed test 'Checking that -certs returns 1 object on a certificate file'
#   at ../openssl/test/recipes/90-test_store.t line 205.
storeutl: Unknown message digest: engine
storeutl: Use -help for summary.
../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic 
-certs -noout ../../../../openssl/test/testcrl.pem => 1
not ok 410 - Checking that -certs returns 0 objects on a CRL file
# --
#   Failed test 'Checking that -certs returns 0 objects on a CRL file'
#   at ../openssl/test/recipes/90-test_store.t line 208.
storeutl: Unknown message digest: engine
storeutl: Use -help for summary.
../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic -crls 
-noout ../../../../openssl/test/testx509.pem => 1
not ok 411 - Checking that -crls returns 0 objects on a certificate file
# --
#   Failed test 'Checking that -crls returns 0 objects on a certificate file'
#   at ../openssl/test/recipes/90-test_store.t line 212.
storeutl: Unknown message digest: engine
storeutl: Use -help for summary.
../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic -crls 
-noout ../../../../openssl/test/testcrl.pem => 1
not ok 412 - Checking that -crls returns 1 object on a CRL file
# --
#   Failed test 'Checking that -crls returns 1 object on a CRL file'
#   at ../openssl/test/recipes/90-test_store.t line 215.
storeutl: Unknown message digest: engine
storeutl: Use -help for summary.
../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic 
-noout -subject '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert' rehash => 1
not ok 413
# --
#   Failed test at ../openssl/test/recipes/90-test_store.t line 226.
storeutl: Unknown message digest: engine
storeutl: Use -help for summary.
../../../util/wrap.pl ../../../apps/openssl storeutl -engine loader_attic 
-noout -subject 

Build failed: openssl master.37234

2020-09-28 Thread AppVeyor



Build openssl master.37234 failed


Commit 53c4992e0b by Pauli on 9/28/2020 5:39 AM:

rand: declare get_hardware_random_value() before use.


Configure your notification preferences



Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-ec2m

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ec2m

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . ok
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok

FAILED build of OpenSSL branch master with options -d --strict-warnings no-ec

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ec

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

65-test_cmp_status.t ... ok
65-test_cmp_vfy.t .. skipped: This test is not supported in a 
no-ec build
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. skipped: No EC with TLSv1.3 is not 
supported by this test
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . ok
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  skipped: test_tls13kexmodes needs EC 
enabled
70-test_tls13messages.t  skipped: test_tls13messages needs EC 
enabled
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... skipped: ct and ec are not supported by 
this OpenSSL build
80-test_dane.t . skipped: test_dane uses ec which is not 
supported by this OpenSSL build
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dsa

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dsa

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . ok
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok

Errored: openssl/openssl#37770 (master - 53c4992)

2020-09-28 Thread Travis CI
Build Update for openssl/openssl
-

Build: #37770
Status: Errored

Duration: 1 hr, 20 mins, and 33 secs
Commit: 53c4992 (master)
Author: Pauli
Message: rand: declare get_hardware_random_value() before use.

Introduced by #12923

Fixes #13004

Reviewed-by: Tim Hudson 
(Merged from https://github.com/openssl/openssl/pull/13005)

View the changeset: 
https://github.com/openssl/openssl/compare/7339547d4550...53c4992e0b1c

View the full build log and details: 
https://travis-ci.com/github/openssl/openssl/builds/186942660?utm_medium=notification_source=email


--

You can unsubscribe from build emails from the openssl/openssl repository going 
to 
https://travis-ci.com/account/preferences/unsubscribe?repository=13885459_medium=notification_source=email.
Or unsubscribe from *all* email updating your settings at 
https://travis-ci.com/account/preferences/unsubscribe?utm_medium=notification_source=email.
Or configure specific recipients for build notifications in your .travis.yml 
file. See https://docs.travis-ci.com/user/notifications.



Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dgram

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dgram

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):


# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . skipped: No DTLS protocols are supported 
by this OpenSSL build
80-test_dtls_mtu.t . skipped: test_dtls_mtu needs DTLS and PSK 
support enabled
80-test_dtlsv1listen.t . ok
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok

# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 7 - iteration 7
# --
# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 8 - iteration 8
# --
# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 9 - iteration 9
# --
# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 10 - iteration 10
# --
# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 11 - iteration 11
# --
# ERROR: (ptr) 'server_ctx != NULL' failed @ 
../openssl/test/ssl_test.c:477
# 0x0
not ok 12 - iteration 12
# --
not ok 1 - test_handshake
# --
../../util/wrap.pl ../../test/ssl_test 04-client_auth.cnf.fips fips 
../../../openssl/test/fips-and-base.cnf => 1
not ok 9 - running ssl_test 04-client_auth.cnf
# --
#   Failed test 'running ssl_test 04-client_auth.cnf'
#   at ../openssl/test/recipes/80-test_ssl_new.t line 173.
# Looks like you failed 1 test of 9.
not ok 5 - Test 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-des

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-des

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

Unable to load private key for CMP client certificate
cmp_main:../openssl/apps/cmp.c:2819:CMP error: cannot set up CMP context
# cmp_main:../openssl/apps/cmp.c:2666:CMP info: using OpenSSL configuration 
file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2263:CMP warning: argument of -proxy option is 
empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:690:CMP warning: certificate from 
'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
../../../../../no-des/util/wrap.pl ../../../../../no-des/apps/openssl cmp 
-config ../Mock/test.cnf -section 'Mock enrollment' -proxy '' -no_proxy 
127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -certout 
test.certout_csr_ignored.pem -out_trusted root.crt -csr idontexist => 1
not ok 72 - csr ignored for ir
# --
#   Failed test 'csr ignored for ir'
#   at ../openssl/test/recipes/81-test_cmp_cli.t line 184.
Could not read private key for CMP client certificate from signer.p12
C04057C11B7F:error::digital envelope routines:EVP_PBE_CipherInit:unknown 
cipher:../openssl/crypto/evp/evp_pbe.c:116:DES-EDE3-CBC
Unable to load private key for CMP client certificate
cmp_main:../openssl/apps/cmp.c:2819:CMP error: cannot set up CMP context
# cmp_main:../openssl/apps/cmp.c:2666:CMP info: using OpenSSL configuration 
file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2263:CMP warning: argument of -proxy option is 
empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:690:CMP warning: certificate from 
'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
../../../../../no-des/util/wrap.pl ../../../../../no-des/apps/openssl cmp 
-config ../Mock/test.cnf -section 'Mock enrollment' -proxy '' -no_proxy 
127.0.0.1 -cmd p10cr -newkey new.key -newkeypass 'pass:' -certout 
test.certout_p10cr.pem -out_trusted root.crt -csr csr.pem => 1
not ok 73 - p10cr csr
# --
Could not read private key for CMP client certificate from signer.p12
C0D0BA148D7F:error::digital envelope routines:EVP_PBE_CipherInit:unknown 
cipher:../openssl/crypto/evp/evp_pbe.c:116:DES-EDE3-CBC
Unable to load private key for CMP client certificate
cmp_main:../openssl/apps/cmp.c:2819:CMP error: cannot set up CMP context
# cmp_main:../openssl/apps/cmp.c:2666:CMP