[gnutls-devel] gnutls build fails depending on timezone

[Nikos Mavrogiannopoulos]

On Wed, Feb 1, 2017 at 7:20 PM, Andreas Metzler <ametzler at bebt.de> wrote:
> Hello,
> Thorsten Glaser has found the following issue with gnutls 3.5.8,
> reported as <http://bugs.debian.org/853732>:
>
> ----- Forwarded message from Thorsten Glaser <tg at mirbsd.de> -----
> [...]
> The build fails in the pkcs7 testsuite because of a wrong date;
> the testsuite fudges to 2038-10-12 00:00:00 localtime:
>
> (pbuild22064)root at tglase:/tmp/buildd/gnutls28-3.5.8 # openssl x509 -noout -text -in doc/credentials/x509/ca.pem | fgrep Not
>             Not Before: May 28 08:36:30 2011 GMT
>             Not After : Oct 12 08:36:33 2038 GMT
>
> The fix is easy:
>
> --- /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7~  2017-01-31 10:37:42.041736473 +0000
> +++ /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7   2017-01-31 10:39:00.490675092 +0000
> @@ -74,7 +74,7 @@
>  fi
>
>  # check validation with date after intermediate cert issuance
> -datefudge -s "2038-10-12" \
> +datefudge -s "2038-10-12 08:36:34 UTC" \
>  ${VALGRIND} "${CERTTOOL}" --inder --p7-verify --load-ca-certificate "${srcdir}/../../doc/credentials/x509/ca.pem" --infile "${srcdir}/data/${FILE}" >"${OUTFILE}"
>  rc=$?
> [...]
> ----- End forwarded message -----
>
> For simplicity's sake I'd simply go for datefudge -s "2038-10-13". ;-)
> I could not reproduce the build-error on amd64, but the Gnutls bug is
> obvious.

Thank you for the report. I've submitted to merge request to address that.

regards,
Nikos