On Mon, May 5, 2014 at 1:06 PM, Orion Poplawski <orion@xxxxxxxxxxxxx> wrote:
On 05/05/2014 11:34 AM, Jon Ciesla wrote:
I've got a pair of odd build failures that I'm probably missing something
obvious on. I'm trying to update both openvpn and dietlibc to their latest
upstreams for rawhide. They build fine locally on f20, in mock for f20, and
fail locally in rawhide and mock for rawhide. Looking at the logs, the code
actually seems to build, but the tests are failing.
Openvpn: http://kojipkgs.fedoraproject.org//work/tasks/8039/6808039/build.log
+ ../src/openvpn/openvpn --config /var/tmp/openvpn-2.3.4-1.fc21-1000-loopback-server
+ ../src/openvpn/openvpn --config /var/tmp/openvpn-2.3.4-1.fc21-1000-loopback-client
Fri May 2 19:06:10 2014 Diffie-Hellman initialized with 1024 bit key
Fri May 2 19:06:10 2014 WARNING: file 'sample-keys/server.key' is group or others accessible
Fri May 2 19:06:10 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Fri May 2 19:06:10 2014 UDPv4 link local (bound): [AF_INET]127.0.0.1:52531
Fri May 2 19:06:10 2014 UDPv4 link remote: [AF_INET]127.0.0.1:52530
Fri May 2 19:06:10 2014 TLS: Initial packet from [AF_INET]127.0.0.1:52531, sid=8ded90a5 b7b40d4d
Fri May 2 19:06:10 2014 TLS: Initial packet from [AF_INET]127.0.0.1:52530, sid=fb9ae878 79f258c8
Fri May 2 19:06:10 2014 VERIFY OK: depth=1, C=KG, ST=NA, L=BISHKEK, O=OpenVPN-TEST, emailAddress=me@myhost.mydomain
Fri May 2 19:06:10 2014 VERIFY ERROR: depth=0, error=certificate signature failure: C=KG, ST=NA, O=OpenVPN-TEST, CN=Test-Server, emailAddress=me@myhost.mydomain
Fri May 2 19:06:10 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Fri May 2 19:06:10 2014 TLS Error: TLS object -> incoming plaintext read error
Fri May 2 19:06:10 2014 TLS Error: TLS handshake failed
Fri May 2 19:06:10 2014 Closing TUN/TAP interface
I'm guessing SSL issues for this one. Looks like certificate verification errors.
That's what I thought, but didn't bother upgrading my f20 machine's openssl to match rawhide. Now that I have, I can reproduce the error. So it's bug in either openssl or openvpn. Not sure. Looking, more eyes welcome.
Didn't break the dietlibc tests, though, so that must be something else.
I'm probably just overbusy and missed something obvious, but if someone could
point me in the right direction I'd appreciate it.
Thanks in advance,
-J
--
Orion Poplawski
Technical Manager 303-415-9701 x222
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion@xxxxxxxx
Boulder, CO 80301 http://www.nwra.com
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
--
http://cecinestpasunefromage.wordpress.com/
------------------------------------------------
in your fear, seek only peace
in your fear, seek only love
-d. bowie
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
