FTBFS - test failures due to disabled openssl 3 legacy providers
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
php-dapphp-radius (Debian) |
Fix Released
|
Unknown
|
|||
php-dapphp-radius (Ubuntu) |
Fix Released
|
Undecided
|
Simon Chopin |
Bug Description
php-dapphp-radius currently FTBFS [1].
The attached patch fixes the build and dep8 tests by enabling the OpenSSL 3 legacy provider through the OPENSSL_CONFIG environment variable.
The package does not FTBFS in Debian since debian have not shifted to OpenSSL 3 yet. Therefore, I´d like to include this delta for jammy.
Also note that there are no new features being introduced here. Hence, there should be no need for a FFe for this one.
phpunit --include-path lib
PHPUnit 9.5.10 by Sebastian Bergmann and contributors.
....F.F...F.S 13 / 13 (100%)
Time: 00:00.006, Memory: 6.00 MB
There were 3 failures:
1) ClientTest:
Failed asserting that two strings are equal.
--- Expected
+++ Actual
@@ @@
-'5f169b7d81765
+''
/<<PKGBUILDDIR>
2) ClientTest:
Failed asserting that two strings are equal.
--- Expected
+++ Actual
@@ @@
-'a3d12ce2f52d1
+''
/<<PKGBUILDDIR>
3) ClientTest:
Failed asserting that two strings are equal.
--- Expected
+++ Actual
@@ @@
-'01870082093e4
+'0187006a093e4
/<<PKGBUILDDIR>
FAILURES!
Tests: 13, Assertions: 28, Failures: 3, Skipped: 1.
make[1]: *** [debian/rules:21: override_
Changed in php-dapphp-radius (Ubuntu): | |
assignee: | nobody → Simon Chopin (schopin) |
status: | New → In Progress |
Changed in php-dapphp-radius (Ubuntu): | |
status: | In Progress → Incomplete |
assignee: | Simon Chopin (schopin) → nobody |
assignee: | nobody → Athos Ribeiro (athos-ribeiro) |
tags: | added: transition-openssl3-jj |
description: | updated |
Changed in php-dapphp-radius (Ubuntu): | |
status: | Incomplete → In Progress |
status: | In Progress → Confirmed |
assignee: | Athos Ribeiro (athos-ribeiro) → Simon Chopin (schopin) |
Changed in php-dapphp-radius (Debian): | |
status: | Unknown → New |
Changed in php-dapphp-radius (Ubuntu): | |
status: | Confirmed → Fix Committed |
Changed in php-dapphp-radius (Debian): | |
status: | New → Fix Released |
Hi there :)
The attached debdiff doesn't seem to fix things, as I get the exact same failures when building with a -proposed enabled sbuild.
However, you were well inspired by asking me to sponsor this one, since it seems the failure is actually OpenSSL-3 related. MSCHAP is an old protocol that relies on DES, which has mostly been relegated to the legacy provider in OpenSSL 3.
Sadly, it seems PHP 8.1 doesn't have builtin support for loading third-party providers in the code, but I'm guessing we can work around that by exporting the right environment variables, in this case
OPENSSL_CONFIG, along with a properly crafted config file looking like this:
openssl_conf = openssl_init
[openssl_init]
providers = provider_sect
[provider_sect]
default = default_sect
legacy = legacy_sect
[default_sect]
activate = 1
[legacy_sect]
activate = 1