[Swan-dev] test suite hitch

Antony Antony antony at phenome.org
Sun Nov 13 13:23:17 UTC 2016


May be the guest vm did not have upgrade pyOpenSSL version. It didn't upgrade after installing from DVD ISO image.
May be the upgrade of pyOpenSSL failed? testing/libvirt/fedora22.ks has the line

dnf upgrade -y 2>&1 \
    pyOpenSSL \
    | tee /var/tmp/yum-upgrade.log

I think the failures inside fedora22.ks is not critical. However, there will be a log!

If it succeded in /var/tmp/yum-upgrade.log there should show something like :
Upgrading:
 pyOpenSSL         noarch         0.15.1-1.fc22           updates         187 k


check /var/tmp/yum-upgrade.log on say east.

A temporary fix is to create kesys on the host. If your host is F22 or later and has a recent pyOpenSSL.
cd libreswan/testing/x509/
./dist_certs.py

You could also fix it manuall in the swanfedora22base. It is a bit more complicated.

regards,
-antony



On Sat, Nov 12, 2016 at 03:43:29PM -0500, D. Hugh Redelmeier wrote:
> I still cannot run tests.  Something remains busted.
> 
> Perhaps a stale version of pyOpenSSL?
> 
> Can someone fix this?
> 
> | From: Andrew Cagney <andrew.cagney at gmail.com>
> 
> | On 31 October 2016 at 07:23, D. Hugh Redelmeier <hugh at mimosa.com> wrote:
> 
> | >         [build at redtiny libreswan]$ time make kvm-uninstall
> | >         [build at redtiny libreswan]$ make kvm-clean
> | >         [build at redtiny libreswan]$ time make kvm-install
> | >
> | > Did not work:
> | >
> | > creating crl set
> | > Traceback (most recent call last):
> | >   File "./dist_certs.py", line 634, in <module>
> | >     main()
> | >   File "./dist_certs.py", line 626, in main
> | >     run_dist_certs()
> | >   File "./dist_certs.py", line 605, in run_dist_certs
> | >     create_crlsets()
> | >   File "./dist_certs.py", line 479, in create_crlsets
> | >     days=0, digest='sha1'))
> | > TypeError: export() got an unexpected keyword argument 'digest'
> | > [root at east x509 1]#
> | > /home/build/libreswan/mk/kvm-targets.mk:240: recipe for target 'testing/x509/keys/up-to-date' failed
> | > make: *** [testing/x509/keys/up-to-date] Error 1
> | 
> | I'm not sure.  The last relevant changes were:
> 
> 36b71dc354e0bb7ddeece262acb5e8aac8486026: 
> 
> | Date:   Thu Oct 13 19:51:05 2016 -0400
> | 
> |     dist_certs.py: create "badca" with a false CA ext
> | 
> 
> 5d2c945bde5f14d20a16e3a49fd079bb6cd710e1:
> 
> | Date:   Wed Sep 7 16:40:10 2016 -0400
> | 
> |     testing: For f22, upgrade pyOpenSSL to latest
> | 
> |     The version on the ISO was too old.  Long term,
> |     need to switch over to fedora23.
> | 
> |     See also: a4781e36540a4fa25ccc06dc3453290b541db793
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev


More information about the Swan-dev mailing list