Bug#1006568: rauc: FTBFS with OpenSSL 3.0

[Sebastian Andrzej Siewior]

Source: rauc
Version: 1.6-1
Severity: important
Tags: bookworm sid
User: pkg-open...@lists.alioth.debian.org
Usertags: ftbfs-3.0

Your package is failing to build using OpenSSL 3.0 with the
following error:

|Creating bundle in 'plain' format
|C08ACC46967F0000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
|C08ACC46967F0000:error:13000084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:422:
|C08ACC46967F0000:error:13000074:engine routines:ENGINE_by_id:no such engine:../crypto/engine/eng_list.c:430:id=pkcs11
|not ok 20 - rauc bundle with PKCS11 (key 1)
|FAIL: test/rauc.t 20 - rauc bundle with PKCS11 (key 1)
|#
|# rm -f /tmp/tmp.tWg9HDFzTh/out.raucb &&
|# rauc --cert 'pkcs11:token=rauc;object=autobuilder-1' --key 'pkcs11:token=rauc;object=autobuilder-1' bundle /<<PKGBUILDDIR>>/test/install-content /tmp/tmp.tWg9HDFzTh/out.raucb &&
|# rauc -c /<<PKGBUILDDIR>>/test/test.conf info /tmp/tmp.tWg9HDFzTh/out.raucb
|#
|
|expecting success:
| rm -f /tmp/tmp.tWg9HDFzTh/out.raucb &&
| rauc --cert 'pkcs11:token=rauc;object=autobuilder-2' --key 'pkcs11:token=rauc;object=autobuilder-2' bundle /<<PKGBUILDDIR>>/test/install-content /tmp/tmp.tWg9HDFzTh/out.raucb &&
| test_must_fail rauc -c /<<PKGBUILDDIR>>/test/test.conf info /tmp/tmp.tWg9HDFzTh/out.raucb
|
|Creating bundle in 'plain' format
|C07A4859767F0000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
|C07A4859767F0000:error:13000084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:422:
|C07A4859767F0000:error:13000074:engine routines:ENGINE_by_id:no such engine:../crypto/engine/eng_list.c:430:id=pkcs11
|not ok 21 - rauc bundle with PKCS11 (key 2, revoked)
|FAIL: test/rauc.t 21 - rauc bundle with PKCS11 (key 2, revoked)
|#
|# rm -f /tmp/tmp.tWg9HDFzTh/out.raucb &&
|# rauc --cert 'pkcs11:token=rauc;object=autobuilder-2' --key 'pkcs11:token=rauc;object=autobuilder-2' bundle /<<PKGBUILDDIR>>/test/install-content /tmp/tmp.tWg9HDFzTh/out.raucb &&
|# test_must_fail rauc -c /<<PKGBUILDDIR>>/test/test.conf info /tmp/tmp.tWg9HDFzTh/out.raucb
|#
…
|# failed 2 among 73 test(s)
|1..73
|ERROR: test/rauc.t - exited with status 1
| ============================================================================
| Testsuite summary for rauc 1.6
| ============================================================================
| # TOTAL: 289
| # PASS: 181
| # SKIP: 105
| # XFAIL: 0
| # FAIL: 2
| # XPASS: 0
| # ERROR: 1
| ============================================================================
| See ./test-suite.log
| Please report to ra...@pengutronix.de
| ============================================================================
| make[4]: *** [Makefile:1852: test-suite.log] Error 1
| make[3]: *** [Makefile:1960: check-TESTS] Error 2
| make[2]: *** [Makefile:2181: check-am] Error 2
| make[1]: *** [Makefile:2183: check] Error 2
| make[1]: Leaving directory '/<<PKGBUILDDIR>>'
| dh_auto_test: error: make -j1 check VERBOSE=1 returned exit code 2

For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html

Sebastian

[Jan Lübbe]

On Sun, 27 Feb 2022 22:15:45 +0100 Sebastian Andrzej Siewior <seba...@breakpoint.cc> wrote:
> Your package is failing to build using OpenSSL 3.0 with the
> following error:
>
> |Creating bundle in 'plain' format
> |C08ACC46967F0000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
> |C08ACC46967F0000:error:13000084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:422:
> |C08ACC46967F0000:error:13000074:engine routines:ENGINE_by_id:no such engine:../crypto/engine/eng_list.c:430:id=pkcs11
> |not ok 20 - rauc bundle with PKCS11 (key 1)
> |FAIL: test/rauc.t 20 - rauc bundle with PKCS11 (key 1)

This seems to be caused by a missing PKCS#11 OpensSSL engine. RAUC's test suite
uses SoftHSM to test the PKCS#11 support, so it needs a working PKCS#11 engine
and module matching the active OpenSSL. In Debian, the engine is provided by
libp11 (in libengine-pkcs11-openssl) and the module is provided by SoftHSM (in
libsofthsm2).

Neither of libp11 nor SoftHSM have been updated to OpenSSL 3 in Debian yet, so
the PKCS#11 tests can't work. Without PKCS#11 support, RAUC should already work
with OpenSSL 3, though. As soon as the dependencies are updated, PKCS#11 in RAUC
should work as well without further changes to RAUC.

Regards,
Jan

[Sebastian Andrzej Siewior]

On 2022-05-11 17:58:22 [+0200], Uwe Kleine-König wrote:
> I just confirmed that. I built libp11 in sid + openssl3. With the
> resulting packages installed rauc just builds fine against openssl3.
>
> So I'm unsure what I should do about this bug. Close it? Reassign to
> libp11? Just wait until it resolves itself?

If that the case, then the package will build fine if the binNMUs happen
in the right order. In that case, feel free to close the bug.

Thank you for checking.

> Best regards
> Uwe

Sebastian