Building Nova 18.0.0 in Debian Sid makes the below unit tests fail. Note that it is probably related to OpenSSL 1.1.1 (though I didn't investigate further and disabled running test tests).
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_message_with_newlines_at_end
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_message_with_newlines_at_end
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1679, in test_encrypt_message_with_newlines_at_end
self._test_encryption('This message has a newline at the end.\n')
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_newlines_inside_message
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_newlines_inside_message
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1685, in test_encrypt_newlines_inside_message
self._test_encryption('Message\nwith\ninterior\nnewlines.')
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_many_newlines_at_end
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_many_newlines_at_end
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1682, in test_encrypt_many_newlines_at_end
self._test_encryption('Message with lotsa newlines.\n\n\n')
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_really_long_message
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_really_long_message
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1691, in test_encrypt_really_long_message
self._test_encryption(''.join(['abcd' for i in range(1024)]))
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_simple_message
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_simple_message
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1676, in test_encrypt_simple_message
self._test_encryption('This is a simple message.')
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
======================================================================
FAIL: nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_with_leading_newlines
nova.tests.unit.virt.xenapi.test_xenapi.XenAPIDiffieHellmanTestCase.test_encrypt_with_leading_newlines
----------------------------------------------------------------------
_StringException: Traceback (most recent call last):
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1688, in test_encrypt_with_leading_newlines
self._test_encryption('\n\nMessage with leading newlines.')
File "/<<PKGBUILDDIR>>/nova/tests/unit/virt/xenapi/test_xenapi.py", line 1670, in _test_encryption
enc = self.alice.encrypt(message)
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 432, in encrypt
return self._run_ssl(text).strip('\n')
File "/<<PKGBUILDDIR>>/nova/virt/xenapi/agent.py", line 428, in _run_ssl
raise RuntimeError(_('OpenSSL error: %s') % err)
RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
Unit tests arguably shouldn't be executing native binaries anyway.