• Bug#1106065: rust-rustls: FTBFS: tests fails because of expired certifi

    From Santiago Vila@21:1/5 to All on Mon May 19 12:00:01 2025
    Package: src:rust-rustls
    Version: 0.20.8-4
    Severity: serious
    Control: close -1 0.23.26+ds-1
    Tags: ftbfs bookworm

    Dear maintainer:

    During a rebuild of all packages in bookworm, your package failed to build:

    [ Note: The bug is closed with the version in trixie/sid, but
    packages in bookworm must still build in bookworm ].

    --------------------------------------------------------------------------------
    [...]
    failures:
    alpn
    buffered_both_data_sent
    buffered_client_data_sent
    buffered_server_data_sent
    client_auth_works
    client_can_get_server_cert
    client_can_get_server_cert_after_resumption
    client_cert_resolve
    client_checks_server_certificate_with_given_name
    client_close_notify
    client_closes_uncleanly
    client_complete_io_for_handshake
    client_complete_io_for_read
    client_complete_io_for_write
    client_respects_buffer_limit_post_handshake
    client_respects_buffer_limit_pre_handshake
    client_respects_buffer_limit_pre_handshake_with_vectored_write
    client_stream_read
    client_stream_write
    client_streamowned_read
    client_streamowned_write
    early_data_can_be_rejected_by_server
    early_data_is_available_on_resumption
    key_log_for_tls12
    key_log_for_tls13
    negotiated_ciphersuite_client
    negotiated_ciphersuite_default
    negotiated_ciphersuite_server
    server_allow_any_anonymous_or_authenticated_client
    server_can_get_client_cert
    server_can_get_client_cert_after_resumption
    server_close_notify
    server_closes_uncleanly
    server_complete_io_for_handshake
    server_complete_io_for_read
    server_complete_io_for_write
    server_exposes_offered_sni
    server_exposes_offered_sni_smashed_to_lowercase
    server_respects_buffer_limit_post_handshake
    server_respects_buffer_limit_pre_handshake
    server_respects_buffer_limit_pre_handshake_with_vectored_write
    server_stream_read
    server_stream_write
    server_streamowned_read
    server_streamowned_write
    sni_resolver_lower_cases_configured_names
    sni_resolver_lower_cases_queried_names
    sni_resolver_works
    stream_write_reports_underlying_io_error_before_plaintext_processed
    stream_write_swallows_underlying_io_error_after_plaintext_processed
    test_client_attempts_to_use_unsupported_kx_group
    test_client_config_keyshare
    test_client_sends_helloretryrequest
    test_client_tls12_no_resume_after_server_downgrade
    test_no_warning_logging_during_successful_sessions
    test_received_plaintext_backpressure
    test_server_mtu_reduction
    test_tls12_exporter
    test_tls13_exporter
    tls13_stateful_resumption
    tls13_stateless_resumption
    vectored_write_for_client_appdata
    vectored_write_for_client_handshake
    vectored_write_for_server_appdata
    vectored_write_for_server_handshake_no_half_rtt_by_default
    vectored_write_for_server_handshake_no_half_rtt_with_client_auth
    vectored_write_for_server_handshake_with_half_rtt_data
    vectored_write_with_slow_client
    versions

    test result: FAILED. 50 passed; 69 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

    error: test failed, to rerun pass `-p rustls --test api`
    dh_auto_test: error: /<<PKGBUILDDIR>>/debian/dh-cargo/bin/cargo test returned exit code 101
    make: *** [debian/rules:9: binary] Error 25
    dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2 --------------------------------------------------------------------------------

    The above is just how the build ends and not necessarily the most relevant part.
    If required, the full build log is available here:

    https://people.debian.org/~sanvila/build-logs/bookworm/

    About the archive rebuild: The build was made on virtual machines from AWS, using sbuild and a reduced chroot with only build-essential packages.

    If you could not reproduce the bug please contact me privately, as I
    am willing to provide ssh access to a virtual machine where the bug is
    fully reproducible.

    If this is really a bug in one of the build-depends, please use
    reassign and add an affects on src:rust-rustls, so that this is still
    visible in the BTS web page for this package.

    Thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)