On Tue, Oct 23, 2018 at 10:15:28PM +0200, Helmut Grohne wrote:
> serf fails to build from source in unstable e.g. on i386:
> 
> https://tests.reproducible-builds.org/debian/rbuild/unstable/i386/serf_1.3.9-6.rbuild.log.gz
> 
> | There were 14 failures:
> | 1) test_ssl_trust_rootca: test/test_util.c:456: expected <0> but was 
> <120199>
> | 2) test_ssl_certificate_chain_with_anchor: test/test_util.c:456: expected 
> <0> but was <120199>

Ah, the bad cert timebomb has expired again (see #862027).  I was hoping
a new upstream release would have happened in the interim.

There is hope, as there's a release candidate out for their next
version, which contains a script to generate the bad certs at build
time.

I'll see about backporting the script if the upstream release doesn't
happen Real Soon Now.  I'll probably have to look into it anyway, since
this is going to affect stable builds too.

Cheers,
-- 
James
GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7  2D23 DFE6 91AE 331B A3DB

Reply via email to