From Jurica.Stanojkovic at rt-rk.com Tue Sep 16 14:20:36 2014 From: Jurica.Stanojkovic at rt-rk.com (Jurica Stanojkovic) Date: Tue, 16 Sep 2014 14:20:36 +0200 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid Message-ID: <58b-54182b00-1-3cd8760@142679530> Hello, Package mod-gnutls is FTBFS on Debian sid for many different architectures. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750857 Can someone please offer some suggestions about this issue? Thank you! Jurica ? -------------- next part -------------- An HTML attachment was scrubbed... URL: From ramkumar.chinchani at gmail.com Wed Sep 17 22:01:42 2014 From: ramkumar.chinchani at gmail.com (Ramkumar Chinchani) Date: Wed, 17 Sep 2014 13:01:42 -0700 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid Message-ID: make[3]: *** [check-TESTS] Error 2 make[2]: *** [check-am] Error 2 make[1]: *** [check-recursive] Error 1 dh_auto_test: make -j1 check returned exit code 2 make[3]: Leaving directory `/?PKGBUILDDIR?' make[2]: Leaving directory `/?PKGBUILDDIR?' make[1]: Leaving directory `/?PKGBUILDDIR?' -------------- next part -------------- An HTML attachment was scrubbed... URL: From ramkumar.chinchani at gmail.com Thu Sep 18 08:57:13 2014 From: ramkumar.chinchani at gmail.com (Ramkumar Chinchani) Date: Wed, 17 Sep 2014 23:57:13 -0700 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid In-Reply-To: References: Message-ID: Hi Jurica, The reason for the failure is the inclusion of run_tests.sh in 0.6.x At least the following patch is needed since "certtool" doesn't like "a=b" style options. Thanks. diff --git a/t/Makefile b/t/Makefile index c7e7e2c..f69aaca 100644 --- a/t/Makefile +++ b/t/Makefile @@ -61,15 +61,15 @@ server.uid: server.uid.in # special cases for the authorities' root certs: authority/x509.pem: authority.template authority/secret.key - certtool --generate-self-signed --load-privkey=authority/secret.key --template=authority.template > $@ + certtool --generate-self-signed --load-privkey authority/secret.key --template authority.template > $@ rogueca/x509.pem: rogueca.template rogueca/secret.key - certtool --generate-self-signed --load-privkey=rogueca/secret.key --template=rogueca.template > $@ + certtool --generate-self-signed --load-privkey rogueca/secret.key --template rogueca.template > $@ %/cert-request: %.template %/secret.key - certtool --generate-request --load-privkey=$(dir $@)secret.key --template=$< > $@ + certtool --generate-request --load-privkey $(dir $@)secret.key --template $< > $@ %/x509.pem: %.template %/cert-request authority/secret.key authority/x509.pem - certtool --generate-certificate --load-ca-certificate=authority/x509.pem --load-ca-privkey=authority/secret.key --load-request=$(dir $@)cert-request + certtool --generate-certificate --load-ca-certificate authority/x509.pem --load-ca-privkey authority/secret.key --load-request $(dir $@)cert-request msva.gnupghome/trustdb.gpg: authority/minimal.pgp client/cert.pgp mkdir -p -m 0700 $(dir $@) On Wed, Sep 17, 2014 at 1:01 PM, Ramkumar Chinchani < ramkumar.chinchani at gmail.com> wrote: > > make[3]: *** [check-TESTS] Error 2 > make[2]: *** [check-am] Error 2 > make[1]: *** [check-recursive] Error 1 > dh_auto_test: make -j1 check returned exit code 2 > make[3]: Leaving directory `/?PKGBUILDDIR?' > make[2]: Leaving directory `/?PKGBUILDDIR?' > make[1]: Leaving directory `/?PKGBUILDDIR?' > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Jurica.Stanojkovic at rt-rk.com Mon Sep 22 18:26:51 2014 From: Jurica.Stanojkovic at rt-rk.com (Jurica Stanojkovic) Date: Mon, 22 Sep 2014 18:26:51 +0200 Subject: [mod_gnutls-devel] =?utf-8?q?mod-gnutls_FTBFS_on_Debian_sid?= In-Reply-To: Message-ID: <40f5-54204e00-29-1416b940@98133720> Hello, I have found that if i change value TEST_IP in t/Makefile: --- mod-gnutls-0.6.orig/t/Makefile +++ mod-gnutls-0.6/t/Makefile @@ -6,7 +6,7 @@ ?# simple configuration choices. ?export TEST_HOST ?= localhost -export TEST_IP ?= ::1 +export TEST_IP ?= 127.0.0.1 ?# chosen at random: ?export TEST_PORT ?= 9932 ?export MSVA_PORT ?= 9933 package does build successfully, without any other changes to source. I suspect that Debian build machines have different configuration in /etc/hosts and that failiure is caused by configuration. Is this change of TEST_IP value good solution? Thank you! Jurica -------- Original Message -------- Subject: Re: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid Date: Thursday, September 18, 2014 08:57 CEST From: Ramkumar Chinchani To: mod_gnutls-devel at lists.gnutls.org, Jurica.Stanojkovic at rt-rk.com References: ?Hi Jurica, ?The reason for the failure is the inclusion of run_tests.sh in 0.6.xAt least the following patch is needed since "certtool" doesn't like "a=b" style options. ?Thanks. diff --git a/t/Makefile b/t/Makefile index c7e7e2c..f69aaca 100644 --- a/t/Makefile +++ b/t/Makefile @@ -61,15 +61,15 @@ server.uid: server.uid.in ? ?# special cases for the authorities' root certs: ?authority/x509.pem: authority.template authority/secret.key -?????? certtool --generate-self-signed --load-privkey=authority/secret.key --template=authority.template > $@ +?????? certtool --generate-self-signed --load-privkey authority/secret.key --template authority.template > $@ ?rogueca/x509.pem: rogueca.template rogueca/secret.key -?????? certtool --generate-self-signed --load-privkey=rogueca/secret.key --template=rogueca.template > $@ +?????? certtool --generate-self-signed --load-privkey rogueca/secret.key --template rogueca.template > $@ ? ?%/cert-request: %.template %/secret.key -?????? certtool --generate-request --load-privkey=$(dir $@)secret.key --template=$< > $@ +?????? certtool --generate-request --load-privkey $(dir $@)secret.key --template $< > $@ ? ?%/x509.pem: %.template %/cert-request authority/secret.key authority/x509.pem -?????? certtool --generate-certificate --load-ca-certificate=authority/x509.pem --load-ca-privkey=authority/secret.key --load-request=$(dir $@)cert-request +?????? certtool --generate-certificate --load-ca-certificate authority/x509.pem --load-ca-privkey authority/secret.key --load-request $(dir $@)cert-request ? ?msva.gnupghome/trustdb.gpg: authority/minimal.pgp client/cert.pgp ??????? mkdir -p -m 0700 $(dir $@) ??On Wed, Sep 17, 2014 at 1:01 PM, Ramkumar Chinchani wrote: make[3]: *** [check-TESTS] Error 2 make[2]: *** [check-am] Error 2 make[1]: *** [check-recursive] Error 1 dh_auto_test: make -j1 check returned exit code 2 make[3]: Leaving directory `/?PKGBUILDDIR?' make[2]: Leaving directory `/?PKGBUILDDIR?' make[1]: Leaving directory `/?PKGBUILDDIR?' ?=v97mwrgmxhyuot0vadrsaaaftvkqqu88kvsyqbsq at mail.gmail.com> ? -------------- next part -------------- An HTML attachment was scrubbed... URL: From dkg at fifthhorseman.net Mon Sep 22 19:44:18 2014 From: dkg at fifthhorseman.net (Daniel Kahn Gillmor) Date: Mon, 22 Sep 2014 13:44:18 -0400 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid In-Reply-To: <40f5-54204e00-29-1416b940@98133720> References: <40f5-54204e00-29-1416b940@98133720> Message-ID: <54205FF2.6010800@fifthhorseman.net> Hi Jurica and Ramkumar-- thank you both for your attention on this. On 09/22/2014 12:26 PM, Jurica Stanojkovic wrote: > I have found that if i change value TEST_IP in t/Makefile: > --- mod-gnutls-0.6.orig/t/Makefile > +++ mod-gnutls-0.6/t/Makefile > @@ -6,7 +6,7 @@ > # simple configuration choices. > > export TEST_HOST ?= localhost > -export TEST_IP ?= ::1 > +export TEST_IP ?= 127.0.0.1 > # chosen at random: > export TEST_PORT ?= 9932 > export MSVA_PORT ?= 9933 > > package does build successfully, without any other changes to source. Hm, interesting. I'm able to build cleanly on a stock debian unstable amd64 system without any errors, without changing this. Are you saying you tested this on any specific machine? I'd love to see the /etc/hosts of the machine on which this resolved the failure. Ramkumar wrote: > The reason for the failure is the inclusion of run_tests.sh in 0.6.xAt least the following patch is needed since "certtool" doesn't like "a=b" style options. This seems wrong to me -- certtool definitely is OK with --foo=bar style options. --dkg -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 949 bytes Desc: OpenPGP digital signature URL: From ramkumar.chinchani at gmail.com Tue Sep 23 04:37:06 2014 From: ramkumar.chinchani at gmail.com (Ramkumar Chinchani) Date: Mon, 22 Sep 2014 19:37:06 -0700 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid In-Reply-To: References: <40f5-54204e00-29-1416b940@98133720> <54205FF2.6010800@fifthhorseman.net> Message-ID: This same issue reproduces on Debian Wheezy, BTW. $ certtool -v certtool (GnuTLS) 2.12.20 Packaged by Debian (2.12.20-8+deb7u2) On Mon, Sep 22, 2014 at 7:32 PM, Ramkumar Chinchani < ramkumar.chinchani at gmail.com> wrote: > Hi Daniel, > > Here is the failure I am seeing. > > $ certtool -v > certtool (GnuTLS) 2.12.23 > Packaged by Debian (2.12.23-12ubuntu2.1) > > This fails ... > > $ certtool --generate-request --load-privkey=server/secret.key > --template=server.template > server/cert-request > Try `certtool --help' for more information. > > $ echo $? > 1 > > This works. > > $ certtool --generate-request --load-privkey server/secret.key --template > server.template > server/cert-request > Generating a PKCS #10 certificate request... > > $ echo $? > 0 > > > On Mon, Sep 22, 2014 at 10:44 AM, Daniel Kahn Gillmor < > dkg at fifthhorseman.net> wrote: > >> Hi Jurica and Ramkumar-- >> >> thank you both for your attention on this. >> >> On 09/22/2014 12:26 PM, Jurica Stanojkovic wrote: >> >> > I have found that if i change value TEST_IP in t/Makefile: >> > --- mod-gnutls-0.6.orig/t/Makefile >> > +++ mod-gnutls-0.6/t/Makefile >> > @@ -6,7 +6,7 @@ >> > # simple configuration choices. >> > >> > export TEST_HOST ?= localhost >> > -export TEST_IP ?= ::1 >> > +export TEST_IP ?= 127.0.0.1 >> > # chosen at random: >> > export TEST_PORT ?= 9932 >> > export MSVA_PORT ?= 9933 >> > >> > package does build successfully, without any other changes to source. >> >> Hm, interesting. I'm able to build cleanly on a stock debian unstable >> amd64 system without any errors, without changing this. >> >> Are you saying you tested this on any specific machine? I'd love to see >> the /etc/hosts of the machine on which this resolved the failure. >> >> Ramkumar wrote: >> > The reason for the failure is the inclusion of run_tests.sh in 0.6.xAt >> least the following patch is needed since "certtool" doesn't like "a=b" >> style options. >> >> This seems wrong to me -- certtool definitely is OK with --foo=bar style >> options. >> >> --dkg >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ramkumar.chinchani at gmail.com Tue Sep 23 04:32:17 2014 From: ramkumar.chinchani at gmail.com (Ramkumar Chinchani) Date: Mon, 22 Sep 2014 19:32:17 -0700 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid In-Reply-To: <54205FF2.6010800@fifthhorseman.net> References: <40f5-54204e00-29-1416b940@98133720> <54205FF2.6010800@fifthhorseman.net> Message-ID: Hi Daniel, Here is the failure I am seeing. $ certtool -v certtool (GnuTLS) 2.12.23 Packaged by Debian (2.12.23-12ubuntu2.1) This fails ... $ certtool --generate-request --load-privkey=server/secret.key --template=server.template > server/cert-request Try `certtool --help' for more information. $ echo $? 1 This works. $ certtool --generate-request --load-privkey server/secret.key --template server.template > server/cert-request Generating a PKCS #10 certificate request... $ echo $? 0 On Mon, Sep 22, 2014 at 10:44 AM, Daniel Kahn Gillmor wrote: > Hi Jurica and Ramkumar-- > > thank you both for your attention on this. > > On 09/22/2014 12:26 PM, Jurica Stanojkovic wrote: > > > I have found that if i change value TEST_IP in t/Makefile: > > --- mod-gnutls-0.6.orig/t/Makefile > > +++ mod-gnutls-0.6/t/Makefile > > @@ -6,7 +6,7 @@ > > # simple configuration choices. > > > > export TEST_HOST ?= localhost > > -export TEST_IP ?= ::1 > > +export TEST_IP ?= 127.0.0.1 > > # chosen at random: > > export TEST_PORT ?= 9932 > > export MSVA_PORT ?= 9933 > > > > package does build successfully, without any other changes to source. > > Hm, interesting. I'm able to build cleanly on a stock debian unstable > amd64 system without any errors, without changing this. > > Are you saying you tested this on any specific machine? I'd love to see > the /etc/hosts of the machine on which this resolved the failure. > > Ramkumar wrote: > > The reason for the failure is the inclusion of run_tests.sh in 0.6.xAt > least the following patch is needed since "certtool" doesn't like "a=b" > style options. > > This seems wrong to me -- certtool definitely is OK with --foo=bar style > options. > > --dkg > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Jurica.Stanojkovic at rt-rk.com Tue Sep 23 14:19:16 2014 From: Jurica.Stanojkovic at rt-rk.com (Jurica Stanojkovic) Date: Tue, 23 Sep 2014 14:19:16 +0200 Subject: [mod_gnutls-devel] =?utf-8?q?mod-gnutls_FTBFS_on_Debian_sid?= In-Reply-To: <54205FF2.6010800@fifthhorseman.net> Message-ID: <35af-54216580-7-6e2c6e80@256012222> Hello, Our development boards have this in /etc/hosts: 127.0.0.1?????? localhost 127.0.0.1?????? localhost ip6-localhost ip6-loopback Unfortunately I don't have access to official debian buildd machines, so I do not know how this is configured on them. As a second approach, I have tried to change following value in /etc/hosts: 127.0.0.1?????? localhost ip6-localhost ip6-loopback to: ::1 localhost ip6-localhost ip6-loopback and this has also resolved a problem without any changes to the original source. Thank you! Jurica -------- Original Message -------- Subject: Re: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid Date: Monday, September 22, 2014 19:44 CEST From: Daniel Kahn Gillmor To: Jurica Stanojkovic ,Ramkumar Chinchani CC: mod_gnutls-devel at lists.gnutls.org References: <40f5-54204e00-29-1416b940 at 98133720> ?Hi Jurica and Ramkumar-- thank you both for your attention on this. On 09/22/2014 12:26 PM, Jurica Stanojkovic wrote: > I have found that if i change value TEST_IP in t/Makefile: > --- mod-gnutls-0.6.orig/t/Makefile > +++ mod-gnutls-0.6/t/Makefile > @@ -6,7 +6,7 @@ > # simple configuration choices. > > export TEST_HOST ?= localhost > -export TEST_IP ?= ::1 > +export TEST_IP ?= 127.0.0.1 > # chosen at random: > export TEST_PORT ?= 9932 > export MSVA_PORT ?= 9933 > > package does build successfully, without any other changes to source. Hm, interesting. I'm able to build cleanly on a stock debian unstable amd64 system without any errors, without changing this. Are you saying you tested this on any specific machine? I'd love to see the /etc/hosts of the machine on which this resolved the failure. Ramkumar wrote: > The reason for the failure is the inclusion of run_tests.sh in 0.6.xAt least the following patch is needed since "certtool" doesn't like "a=b" style options. This seems wrong to me -- certtool definitely is OK with --foo=bar style options. --dkg ? ? -------------- next part -------------- An HTML attachment was scrubbed... URL: From dkg at fifthhorseman.net Wed Sep 24 19:04:34 2014 From: dkg at fifthhorseman.net (Daniel Kahn Gillmor) Date: Wed, 24 Sep 2014 13:04:34 -0400 Subject: [mod_gnutls-devel] mod-gnutls FTBFS on Debian sid In-Reply-To: References: <40f5-54204e00-29-1416b940@98133720> <54205FF2.6010800@fifthhorseman.net> Message-ID: <5422F9A2.2050701@fifthhorseman.net> On 09/22/2014 10:37 PM, Ramkumar Chinchani wrote: > This same issue reproduces on Debian Wheezy, BTW. > > $ certtool -v > certtool (GnuTLS) 2.12.20 > Packaged by Debian (2.12.20-8+deb7u2) hm, i think this is just a too-old version of certtool. mod_gnutls at this point really will work best with gnutls 3.x at least, so i think it's reasonable to expect the parts of gnutls-bin to come from the same suite. however, i guess moving from --arg=opt to --arg opt in the test suite wouldn't hurt anything. I'll take a look at it, but there may be other dependencies on newer certtool versions they might be harder to fix. I've pushed a fix for this on the master branch. --dkg -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 949 bytes Desc: OpenPGP digital signature URL: From django at nausch.org Mon Sep 29 10:48:42 2014 From: django at nausch.org (Django [BOfH]) Date: Mon, 29 Sep 2014 10:48:42 +0200 Subject: [mod_gnutls-devel] httpd is crashing while reloading apache 2.4 if mod_gnutls and mod_php is loaded Message-ID: <54291CEA.6040803@nausch.org> Hello! I've a big problem with my CentOS 7 based testinstallation. I'm using: httpd-2.4.6-18.el7.centos.x86_64 (from CentOS-Base-Repository) mod_gnutls-0.5.10-13.el7.x86_64 (from EPEL-Repository) php-5.4.16-23.el7_0.x86_64 (from CentOS-Base-Repository) If I load mod_php *AND* mod_gnutls my http-daemon is crashing: [Wed Sep 17 14:53:38.628624 2014] [mpm_prefork:notice] [pid 4751] AH00171: Graceful restart requested, doing restart [Wed Sep 17 14:53:38.649444 2014] [core:notice] [pid 4751] AH00060: seg fault or similar nasty error detected in the parent process I've build mod_gnutls 1.6: http://repository.nausch.org/public/mailserver.guru/7/x86_64/mod_gnutls-0.6-2.el7.centos.x86_64.rpm If I try to reload Apache 2.4 the same shit happens :( [Mon Sep 29 09:18:45.293679 2014] [mpm_prefork:notice] [pid 22504] AH00171: Graceful restart requested, doing restart [Mon Sep 29 09:18:45.329943 2014] [core:notice] [pid 22504] AH00060: seg fault or similar nasty error detected in the parent process I've no idea why httpd dies, maybe someone can help. :) cu Django -- "Bonnie & Clyde der Postmaster-Szene!" approved by Postfix-God http://wetterstation-pliening.info http://dokuwiki.nausch.org http://wiki.piratenpartei.de/Benutzer:Django From django at nausch.org Mon Sep 29 11:02:55 2014 From: django at nausch.org (Django [BOfH]) Date: Mon, 29 Sep 2014 11:02:55 +0200 Subject: [mod_gnutls-devel] httpd is crashing while reloading apache 2.4 if mod_gnutls and mod_php is loaded Message-ID: <5429203F.5030209@nausch.org> Hello! I've a big problem with my CentOS 7 based testinstallation. I'm using: httpd-2.4.6-18.el7.centos.x86_64 (from CentOS-Base-Repository) mod_gnutls-0.5.10-13.el7.x86_64 (from EPEL-Repository) php-5.4.16-23.el7_0.x86_64 (from CentOS-Base-Repository) If I load mod_php *AND* mod_gnutls my http-daemon is crashing: [Wed Sep 17 14:53:38.628624 2014] [mpm_prefork:notice] [pid 4751] AH00171: Graceful restart requested, doing restart [Wed Sep 17 14:53:38.649444 2014] [core:notice] [pid 4751] AH00060: seg fault or similar nasty error detected in the parent process I've build mod_gnutls 1.6: http://repository.nausch.org/public/mailserver.guru/7/x86_64/mod_gnutls-0.6-2.el7.centos.x86_64.rpm If I try to reload Apache 2.4 the same shit happens :( [Mon Sep 29 09:18:45.293679 2014] [mpm_prefork:notice] [pid 22504] AH00171: Graceful restart requested, doing restart [Mon Sep 29 09:18:45.329943 2014] [core:notice] [pid 22504] AH00060: seg fault or similar nasty error detected in the parent process I've no idea why httpd dies, maybe someone can help. :) cu Django -- "Bonnie & Clyde der Postmaster-Szene!" approved by Postfix-God http://wetterstation-pliening.info http://dokuwiki.nausch.org http://wiki.piratenpartei.de/Benutzer:Django From nmav at gnutls.org Mon Sep 29 20:07:42 2014 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 29 Sep 2014 20:07:42 +0200 Subject: [mod_gnutls-devel] httpd is crashing while reloading apache 2.4 if mod_gnutls and mod_php is loaded In-Reply-To: <5429203F.5030209@nausch.org> References: <5429203F.5030209@nausch.org> Message-ID: <1412014062.2466.8.camel@nomad.lan> On Mon, 2014-09-29 at 11:02 +0200, Django [BOfH] wrote: > Hello! > > I've a big problem with my CentOS 7 based testinstallation. > > I'm using: > httpd-2.4.6-18.el7.centos.x86_64 (from CentOS-Base-Repository) > mod_gnutls-0.5.10-13.el7.x86_64 (from EPEL-Repository) > php-5.4.16-23.el7_0.x86_64 (from CentOS-Base-Repository) > > If I load mod_php *AND* mod_gnutls my http-daemon is crashing: > [Wed Sep 17 14:53:38.628624 2014] [mpm_prefork:notice] [pid 4751] > AH00171: Graceful restart requested, doing restart > [Wed Sep 17 14:53:38.649444 2014] [core:notice] [pid 4751] AH00060: seg > fault or similar nasty error detected in the parent process > > I've build mod_gnutls 1.6: > http://repository.nausch.org/public/mailserver.guru/7/x86_64/mod_gnutls-0.6-2.el7.centos.x86_64.rpm > If I try to reload Apache 2.4 the same shit happens :( I'd suggest to report that to the mod_gnutls EPEL 7 package. The best way to debug this is to run apache -X under a debugger or valgrind and send the backtrace. regards, Nikos