Your message dated Sun, 27 Apr 2025 22:04:38 +0000
with message-id <e1u9a74-000kl7...@fasolo.debian.org>
and subject line Bug#1104213: fixed in opensaml 3.3.1-2
has caused the Debian Bug report #1104213,
regarding opensaml: autopkgtest regression: certificate name was not acceptable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1104213: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104213
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: opensaml
Version: 3.3.1-1
Control: found -1 3.2.1-3
Severity: serious
User: debian...@lists.debian.org
Usertags: regression
Dear maintainer(s),
Your package has an autopkgtest, great. However, it fails most of the
time since recently (mid April 2025), including on stable. Can you
please investigate the situation and fix it? I copied some of the output
at the bottom of this report. If I'm not mistaken, the test uses an
external website and something's wrong with it.
The release team has announced [1] that failing autopkgtest on amd64 and
arm64 are considered RC in testing.
More information about this bug and the reason for filing it can be
found on
https://wiki.debian.org/ContinuousIntegration/RegressionEmailInformation
Paul
[1] https://lists.debian.org/debian-devel-announce/2019/07/msg00002.html
https://ci.debian.net/packages/o/opensaml/testing/amd64/60285619/
230s FAIL: samltest
230s ==============
230s
230s Running cxxtest tests (316 tests).........
230s In SAML1AssertionTest::testSignature:
230s
/tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1AssertionTest.h:40:
Warning: Test skipped: Waiting for
https://shibboleth.atlassian.net/browse/CPPOST-125
230s s
230s In SAML1RequestTest::testSignature:
230s
/tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1RequestTest.h:43:
Warning: Test skipped: Waiting for
https://shibboleth.atlassian.net/browse/CPPOST-125
230s s
230s In SAML1ResponseTest::testSignature:
230s
/tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1ResponseTest.h:43:
Warning: Test skipped: Waiting for
https://shibboleth.atlassian.net/browse/CPPOST-125
230s s..1745747138 ERROR XMLTooling.TrustEngine.PKIX : certificate name
was not acceptable
230s ...............................................1745747138 ERROR
OpenSAML.MessageDecoder.SAML1Artifact : replay detected of artifact
(AAGmvK93AsWGNdEuCU9RCaIIqlHJZpEvMgKUt7BTheNeMRZaKk/tfU8D
230s )
230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay
detected of message ID (_09c29477940b4b626cfd32734a15d65d)
230s .1745747138 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction :
unacceptable AudienceRestrictionCondition in assertion
(<saml:AudienceRestrictionCondition
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
230s <saml:Audience>https://sp.example.org</saml:Audience>
230s </saml:AudienceRestrictionCondition>)
230s
.................................................................................................................................................................................................................................................1745747138
ERROR OpenSAML.MessageDecoder.SAML2Artifact : replay detected of
artifact (AAQAAaa8r3cCxYY10S4JT1EJogiqUclmKc7/9hsVQNvhzsClf9x7ubIbtOY=
230s )
230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay
detected of message ID (_267d14254f9d1deadf73a6d7aef00c47)
230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay
detected of message ID (_9c6f9775985e772673263178f131647c)
230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay
detected of message ID (_9f372a1b23ff92e96ec27989d4a70821)
230s .1745747178 ERROR OpenSAML.MetadataProvider.XML : metadata instance
was invalid at time of acquisition
230s 1745747179 WARN OpenSAML.MetadataProvider.XML : adjusted reload
interval to 0 seconds
230s 1745747179 WARN OpenSAML.MetadataProvider.XML : trying backup file,
exception loading remote resource: Metadata instance was invalid at time
of acquisition.
230s 1745747179 ERROR XMLTooling.ParserPool : fatal error on line 0,
column 0, message: unable to open primary document entity
'/tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/data/saml2/metadata/InCommon-metadata.xml.bck'
230s 1745747179 ERROR OpenSAML.MetadataProvider.XML : error while
loading resource
(../samltest/data/saml2/metadata/InCommon-metadata.xml.bck): XML
error(s) during parsing, check log for specifics
230s
230s In XMLMetadataProviderTest::testHTTPProvider:
230s saml2/metadata/XMLMetadataProviderTest.h:56: Error: Test failed:
XML error(s) during parsing, check log for specifics
230s In XMLMetadataProviderTest::testBadSig:
230s saml2/metadata/XMLMetadataProviderTest.h:93: Error: Test failed:
Unable to access local file
(../samltest/data/saml2/metadata/InCommon-metadata.xml.bck)
230s 1745747179 ERROR OpenSAML.MetadataProvider.Chaining :
MetadataProvider child element of type MetadataFilter ignored
230s 1745747179 ERROR OpenSAML.MetadataProvider.Chaining :
MetadataProvider child element of type MetadataFilter ignored
230s .
230s In XMLMetadataProviderTest::testXMLProvider:
230s saml2/metadata/XMLMetadataProviderTest.h:134: Error: Test failed:
Unable to access local file
(../samltest/data/saml2/metadata/InCommon-metadata.xml.bck)
230s In XMLMetadataProviderTest::testXMLWithExcludes:
230s saml2/metadata/XMLMetadataProviderTest.h:171: Error: Test failed:
Unable to access local file
(../samltest/data/saml2/metadata/InCommon-metadata.xml.bck)
230s In XMLMetadataProviderTest::testXMLWithIncludes:
230s saml2/metadata/XMLMetadataProviderTest.h:197: Error: Test failed:
Unable to access local file
(../samltest/data/saml2/metadata/InCommon-metadata.xml.bck)
230s 1745747179 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction :
unacceptable AudienceRestriction in assertion (<saml:AudienceRestriction
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
230s <saml:Audience>https://sp.example.org</saml:Audience>
230s </saml:AudienceRestriction>)
230s 1745747179 WARN OpenSAML.SecurityPolicyRule.BearerConfirmation :
bearer confirmation failed on lack of request/response correlation
230s ..
230s Failed 5 and Skipped 3 of 316 tests
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: opensaml
Source-Version: 3.3.1-2
Done: Ferenc Wágner <wf...@debian.org>
We believe that the bug you reported is fixed in the latest version of
opensaml, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1104...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ferenc Wágner <wf...@debian.org> (supplier of updated opensaml package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Apr 2025 22:47:08 +0200
Source: opensaml
Architecture: source
Version: 3.3.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Shib Team <pkg-shibboleth-de...@alioth-lists.debian.net>
Changed-By: Ferenc Wágner <wf...@debian.org>
Closes: 1104213
Changes:
opensaml (3.3.1-2) unstable; urgency=medium
.
* [963c684] Update Standards-Version to 4.7.2 (no changes required)
* [c09387e] New patch: Use the new InCommon metadata source (Closes:
#1104213)
Checksums-Sha1:
9e28cf8c6b3f8f71fcf66a20208c503461c472ae 2698 opensaml_3.3.1-2.dsc
1dd031fd1cfffe226ac53dcbb41d598f9105ced9 21988 opensaml_3.3.1-2.debian.tar.xz
aa6c82b61e7369e2cdec94d63f3aa07375a0ba70 12347 opensaml_3.3.1-2_amd64.buildinfo
Checksums-Sha256:
52840f02ba0c675a611a2b5bb41a13967ac76b352d2f3730c413fff0d859642a 2698
opensaml_3.3.1-2.dsc
8a7df9bdf8a7751d9ddf0a9d14ce76041fa5060f894a4d2c7b89c951016987c4 21988
opensaml_3.3.1-2.debian.tar.xz
b4ddfc5304ed330379f8449b3aa40d1587c794e1d31fa3b3d93f43ea34b86f24 12347
opensaml_3.3.1-2_amd64.buildinfo
Files:
fa316b6c8eeb4891b549fc16577bbdca 2698 libs optional opensaml_3.3.1-2.dsc
53fc68bc64274baca0f54c70bf2b68a6 21988 libs optional
opensaml_3.3.1-2.debian.tar.xz
8d10e8ca8d6a7738e7e01af4005e39d2 12347 libs optional
opensaml_3.3.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=1j7X
-----END PGP SIGNATURE-----
pgpmH3XK1DSn_.pgp
Description: PGP signature
--- End Message ---
