Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-92846

perl-Net-SSLeay: FTBFS against OpenSSL 3.4.0 and newer [rhel-9.7.0]

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.7
    • rhel-9.7
    • perl-Net-SSLeay
    • None
    • perl-Net-SSLeay-1.94-3.el9
    • No
    • Low
    • rhel-stacks-services-scripting
    • ssg_core_services
    • 18
    • 20
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      perl-Net-SSLeay currently fails to build from source:

       # Testing Net::SSLeay 1.94
      # 
      # Perl information:
      #   Version:         '5.032001'
      #   Executable path: '/usr/bin/perl'
      # 
      # Library version with OpenSSL_version_num():
      #   OPENSSL_VERSION_NUMBER: '0x30500000'
      # 
      # Library information with SSLeay_version() and OpenSSL_version():
      #   SSLEAY_VERSION:              'OpenSSL 3.5.0 8 Apr 2025'
      #   SSLEAY_CFLAGS:               'compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -O3 -fomit-frame-pointer -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -Wa,--noexecstack -Wa,--generate-missing-build-notes=yes -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG -D_GNU_SOURCE -DPURIFY -DDEVRANDOM="\\"/dev/urandom\\"" -DOPENSSL_PEDANTIC_ZEROIZATION -DREDHAT_FIPS_VENDOR="\\"Red Hat Enterprise Linux OpenSSL FIPS Provider\\"" -DREDHAT_FIPS_VERSION="\\"3.5.0-fe9fa575b4d281e9\\"" -DSYSTEM_CIPHERS_FILE="/etc/crypto-policies/back-ends/opensslcnf.config"'
      #   SSLEAY_BUILT_ON:             'built on: Fri May  2 00:00:00 2025 UTC'
      #   SSLEAY_PLATFORM:             'platform: linux-elf'
      #   SSLEAY_DIR:                  'OPENSSLDIR: "/etc/pki/tls"'
      #   OPENSSL_ENGINES_DIR:         'ENGINESDIR: "/usr/lib/engines-3"'
      #   OPENSSL_MODULES_DIR:         'MODULESDIR: "/usr/lib/ossl-modules"'
      #   OPENSSL_CPU_INFO:            'CPUINFO: OPENSSL_ia32cap=0x7ffef3ffffebffff:0x40417f5ef3bfb7ef:0x00000000bc040412:0x0000000000000000:0x0000000000000000'
      #   OPENSSL_VERSION_STRING:      '3.5.0'
      #   OPENSSL_FULL_VERSION_STRING: '3.5.0'
      # 
      # Library version information with OPENSSL_version_*():
      #   OPENSSL_version_major():          '3'
      #   OPENSSL_version_minor():          '5'
      #   OPENSSL_version_patch():          '0'
      #   OPENSSL_version_pre_release():    ''
      #   OPENSSL_version_build_metadata(): ''
      # 
      # Library information with OPENSSL_info():
      #   OPENSSL_INFO_CONFIG_DIR:             '/etc/pki/tls'
      #   OPENSSL_INFO_ENGINES_DIR:            '/usr/lib/engines-3'
      #   OPENSSL_INFO_MODULES_DIR:            '/usr/lib/ossl-modules'
      #   OPENSSL_INFO_DSO_EXTENSION:          '.so'
      #   OPENSSL_INFO_DIR_FILENAME_SEPARATOR: '/'
      #   OPENSSL_INFO_LIST_SEPARATOR:         ':'
      #   OPENSSL_INFO_SEED_SOURCE:            'os-specific'
      #   OPENSSL_INFO_CPU_SETTINGS:           'OPENSSL_ia32cap=0x7ffef3ffffebffff:0x40417f5ef3bfb7ef:0x00000000bc040412:0x0000000000000000:0x0000000000000000'
      t/local/03_use.t ............................ ok
      t/local/04_basic.t .......................... ok
      t/local/05_passwd_cb.t ...................... ok
      t/local/06_tcpecho.t ........................ ok
      t/local/07_sslecho.t ........................ ok
      t/local/08_pipe.t ........................... ok
      t/local/09_ctx_new.t ........................ ok
      t/local/10_rand.t ........................... ok
      t/local/11_read.t ........................... ok
      t/local/15_bio.t ............................ ok
      t/local/20_functions.t ...................... ok
      t/local/21_constants.t ...................... ok
      t/local/22_provider.t ....................... ok
      t/local/22_provider_try_load.t .............. ok
      t/local/22_provider_try_load_zero_retain.t .. ok
      t/local/23_openssl_init.t ................... ok
      t/local/30_error.t .......................... ok
      t/local/31_rsa_generate_key.t ............... ok
      #   Failed test 'X509V3_EXT_print nid=103	extended-cert.cert.pem:4'
      #   at t/local/32_x509_get_cert_info.t line 274.
      #          got: 'Full Name:
      #   URI:http://intermediate-ca.net-ssleay.example/crl1.crl
      # 
      # Full Name:
      #   URI:http://intermediate-ca.net-ssleay.example/crl2.crl
      # '
      #     expected: 'Full Name:
      #   URI:http://intermediate-ca.net-ssleay.example/crl1.crl
      # Full Name:
      #   URI:http://intermediate-ca.net-ssleay.example/crl2.crl'
      #   Failed test 'X509V3_EXT_print nid=86	extended-cert.cert.pem:6'
      #   at t/local/32_x509_get_cert_info.t line 274.
      #          got: 'email:intermediate-ca@net-ssleay.example, URI:http://intermediate-ca.net-ssleay.example, DNS:intermediate-ca.net-ssleay.example, Registered ID:1.2.0.0, IP Address:192.168.0.1, IP Address:FD25:F814:AFB5:9873:0:0:0:1, othername: emailAddress:ica@net-ssleay.example'
      #     expected: 'email:intermediate-ca@net-ssleay.example, URI:http://intermediate-ca.net-ssleay.example, DNS:intermediate-ca.net-ssleay.example, Registered ID:1.2.0.0, IP Address:192.168.0.1, IP Address:FD25:F814:AFB5:9873:0:0:0:1, othername: emailAddress::ica@net-ssleay.example'
      #   Failed test 'X509V3_EXT_print nid=85	extended-cert.cert.pem:8'
      #   at t/local/32_x509_get_cert_info.t line 274.
      #          got: 'email:john.doe@net-ssleay.example, URI:http://johndoe.net-ssleay.example, DNS:johndoe.net-ssleay.example, Registered ID:1.2.3.4, IP Address:192.168.0.2, IP Address:FD25:F814:AFB5:9873:0:0:0:2, othername: emailAddress:jd@net-ssleay.example'
      #     expected: 'email:john.doe@net-ssleay.example, URI:http://johndoe.net-ssleay.example, DNS:johndoe.net-ssleay.example, Registered ID:1.2.3.4, IP Address:192.168.0.2, IP Address:FD25:F814:AFB5:9873:0:0:0:2, othername: emailAddress::jd@net-ssleay.example'
      # Looks like you failed 3 tests of 746.
      t/local/32_x509_get_cert_info.t ............. 
      Dubious, test returned 3 (wstat 768, 0x300)
      Failed 3/746 subtests 
      

      This is caused by OpenSSL 3.4.0 changing the output format slightly. The problem was fixed upstream with #520 so we just need to backport those changes.

              jplesnik@redhat.com Jitka Plesnikova
              jplesnik@redhat.com Jitka Plesnikova
              perl-maint-list perl-maint-list
              Martin Kyral Martin Kyral
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: