Comment 19 for bug 1641615

Revision history for this message
Christian Ehrhardt  (paelzer) wrote : Re: FTBFS of libvirt 2.1 in zesty

# reusing the path in gdb
set env LD_LIBRARY_PATH /root/newertls/usr/lib/x86_64-linux-gnu/
# that brought me to wonder that in the bad case the following break did not catch anything
b virNetTLSContextCheckCertDN if strcmp(dname, "C=UK,CN=libvirt") == 0
# I realized that they were different
GOOD: $1 = 0x7fffffffe1d0 "C=UK,CN=libvirt"
BAD: $1 = 0x7fffffffe180 "CN=libvirt,C=UK"

# So something must have been reordering these AND something breaks on the different order

The value is set by gnutls_x509_crt_get_dn(cert, dname, &dnamesize)
That unearths the conflicting issue / pach in gnutls which is:
https://gitlab.com/gnutls/gnutls/issues/111
https://gitlab.com/gnutls/gnutls/commit/b1b025fcac6fc2258eeb4e527226ba0c2aff2f59

Then on that virNetTLSContextCheckCertDNWhitelist breaks as the strings no more match.