Control: reopen -1 On 5/17/22 08:50, John Paul Adrian Glaubitz wrote: > I just noticed the patches for OpenSSL 3.0 support have already been added to > the > Debian package [1]. I also verified that the package builds fine in unstable > with OpenSSL 3.0. > > Therefore closing this bug report.
Hmm, I was too quick here. While the build itself succeeds, 17 tests are failing: =========================== short test summary info ============================ SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:192: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:233: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:240: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:251: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:262: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:270: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:285: Requires OpenSSL with ENGINE support and OpenSSL < 1.1.1d SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:425: Requires OpenSSL without rsa_oaep_md (< 1.0.2) SKIPPED [1] ../../../tests/hazmat/backends/test_openssl.py:441: Requires OpenSSL without rsa_oaep_md (< 1.0.2) SKIPPED [3] ../../../tests/hazmat/backends/test_openssl.py:612: Requires OpenSSL without EVP_PKEY_DHX (< 1.0.2) SKIPPED [2] ../../../tests/hazmat/backends/test_openssl.py:642: Requires OpenSSL without EVP_PKEY_DHX (< 1.0.2) SKIPPED [2] ../../../tests/hazmat/backends/test_openssl.py:664: Requires OpenSSL without EVP_PKEY_DHX (< 1.0.2) SKIPPED [1] ../../../tests/hazmat/primitives/test_aead.py:41: Requires OpenSSL without ChaCha20Poly1305 support SKIPPED [1] ../../../tests/hazmat/primitives/test_aes.py:258: AES in dummy-mode mode not supported SKIPPED [1] ../../../tests/utils.py:30: 256-bit DH keys are not supported in OpenSSL 3.0.0+ (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/hazmat/primitives/test_dh.py:432: DH keys less than 512 bits are unsupported SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL without Ed25519 support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL without Ed448 support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/hazmat/primitives/test_ed448.py:60: ed448 contexts are not currently supported SKIPPED [1] ../../../tests/utils.py:30: Does not support IDEA ECB (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Does not support IDEA CBC (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Does not support IDEA OFB (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Does not support IDEA CFB (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [480] ../../../tests/hazmat/primitives/utils.py:432: KBKDF does not support algorithm: cmac_aes128 SKIPPED [480] ../../../tests/hazmat/primitives/utils.py:432: KBKDF does not support algorithm: cmac_aes192 SKIPPED [480] ../../../tests/hazmat/primitives/utils.py:432: KBKDF does not support algorithm: cmac_aes256 SKIPPED [480] ../../../tests/hazmat/primitives/utils.py:432: KBKDF does not support algorithm: cmac_tdes2 SKIPPED [480] ../../../tests/hazmat/primitives/utils.py:432: KBKDF does not support algorithm: cmac_tdes3 SKIPPED [800] ../../../tests/hazmat/primitives/utils.py:438: Does not support counter location: middle_fixed SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL without poly1305 support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Requires backend without RSA OAEP label support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [4] ../../../tests/hazmat/primitives/test_serialization.py:1910: Requires bcrypt module SKIPPED [1] ../../../tests/utils.py:30: Requires that bcrypt exists (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL without X25519 support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL without X448 support (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [23] ../../../../../../usr/lib/python3/dist-packages/_pytest/config/__init__.py:1473: no 'wycheproof_root' option found SKIPPED [1] ../../../tests/utils.py:30: Requires OpenSSL < 1.1.0f (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) SKIPPED [1] ../../../tests/utils.py:30: Requires LibreSSL (<cryptography.hazmat.backends.openssl.backend.Backend object at 0x7f39e0d34d90>) ========== 17 failed, 2726 passed, 3261 skipped in 203.25s (0:03:23) =========== So, we need to ignore these failures for the package to build with OpenSSL. Ignoring the failures should be safe as it's just the tests that assume OpenSSL to be version <= 1.1.1. Adrian -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer `. `' Physicist `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913
