On Sun, Sep 28, 2014 at 11:09:34PM +0100, Alberto Bertogli wrote:
> On Sun, Sep 28, 2014 at 07:02:30PM +0200, David Suárez wrote:
> > Source: kxd
> > Version: 0.12-2
> > Severity: serious
> > Tags: jessie sid
> > User: debian...@lists.debian.org
> > Usertags: qa-ftbfs-20140926 qa-ftbfs
> > Justification: FTBFS on amd64
> > 
> > Hi,
> > 
> > During a rebuild of all packages in sid, your package failed to build on
> > amd64.
> > 
> > Relevant part (hopefully):
> > > make[1]: Entering directory '/«PKGBUILDDIR»'
> > > go build -o ./out/kxd ./kxd
> > > go build --tags netgo -a -o ./out/kxc ./kxc
> > > python tests/run_tests -b
> > > .........F.
> > > ======================================================================
> > > FAIL: test_server_cert (__main__.TrickyRequests)
> > > ----------------------------------------------------------------------
> > > Traceback (most recent call last):
> > >   File "tests/run_tests", line 408, in test_server_cert
> > >     self.assertTrue(sock.cipher()[2] > 128)
> > > AssertionError: False is not true
> 
> Hi! I am traveling this week without a laptop so I won't be able to look
> at this properly until next Monday or so.
> 
> However, looking at the output and the test itself, it is very likely
> that this is an issue with the test and not the code.

I confirm that the issue is with the tests.

It seems the openssl defaults have changed, so that the new negotiated
cipher is 'ECDHE-RSA-AES128-GCM-SHA256' with a 128 bit key, which fails
the test.

I've pushed a patch to the "next" branch, which should fix this:
a3195eb (tests: Assert negotiated cipher secret size >= 128 bits)
https://blitiri.com.ar/git/r/kxd/c/a3195ebb69084ea7365324ef69f96ad17c5bd4ae/

Would you mind giving it a try?

Once you confirm it works, I'll move it to the master branch and
possibly make a new release with it and the other 3 patches that have
accumulated since 0.12.

Thanks,
                Alberto


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to