Ludovic Courtès <ludo@HIDDEN>
to control <at> debbugs.gnu.org
.
Full text available.Received: (at 44559) by debbugs.gnu.org; 15 Nov 2020 11:06:10 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sun Nov 15 06:06:10 2020 Received: from localhost ([127.0.0.1]:52608 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1keFrG-0005Rr-6y for submit <at> debbugs.gnu.org; Sun, 15 Nov 2020 06:06:10 -0500 Received: from eggs.gnu.org ([209.51.188.92]:52342) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <ludo@HIDDEN>) id 1keFrD-0005Rc-Sy for 44559 <at> debbugs.gnu.org; Sun, 15 Nov 2020 06:06:08 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:41579) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from <ludo@HIDDEN>) id 1keFr8-00062X-8P; Sun, 15 Nov 2020 06:06:02 -0500 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=42214 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from <ludo@HIDDEN>) id 1keFqt-000162-MA; Sun, 15 Nov 2020 06:05:58 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN> To: Marius Bakke <marius@HIDDEN> Subject: Re: bug#44559: gnutls 3.6.12 fails to build: FAIL: status-request-revoked References: <87d00los2d.fsf@HIDDEN> <87v9eaffpa.fsf@HIDDEN> <87zh3mb7fr.fsf@HIDDEN> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 25 Brumaire an 229 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sun, 15 Nov 2020 12:05:43 +0100 In-Reply-To: <87zh3mb7fr.fsf@HIDDEN> (Marius Bakke's message of "Thu, 12 Nov 2020 22:18:16 +0100") Message-ID: <87zh3iani0.fsf@HIDDEN> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 44559 Cc: 44559 <at> debbugs.gnu.org, Christopher Baines <mail@HIDDEN> X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -3.3 (---) Hi, Marius Bakke <marius@HIDDEN> skribis: > Ludovic Court=C3=A8s <ludo@HIDDEN> writes: > >> The question for us becomes how to ensure long-term reproducibility in >> the presence of such bugs. >> >> In this case, I think the only solution would be to change the system >> clock when one rebuilds GnuTLS (or to use =E2=80=98--without-tests=3Dgnu= tls=E2=80=99, but >> you end up with different derivations, which is not necessarily >> desirable). >> >> Thoughts? > > There is a related bug report here: > > https://issues.guix.gnu.org/39310 > > Perhaps we could make a "--with-system-clock" option for 'guix build' > that instructs the daemon to fake the system time? How would it fake it though? There are time_namespaces(7), but it=E2=80=99s only for CLOCK_MONOTONIC and CLOCK_BOOTTIME. LD_PRELOAD like =E2=80=98datefudge=E2=80=99 does is probably not a viable o= ption. Ludo=E2=80=99.
bug-guix@HIDDEN
:bug#44559
; Package guix
.
Full text available.Received: (at 44559) by debbugs.gnu.org; 12 Nov 2020 21:18:25 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Thu Nov 12 16:18:25 2020 Received: from localhost ([127.0.0.1]:45786 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1kdJz7-0008Hm-GC for submit <at> debbugs.gnu.org; Thu, 12 Nov 2020 16:18:25 -0500 Received: from eggs.gnu.org ([209.51.188.92]:55168) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <marius@HIDDEN>) id 1kdJz6-0008HW-69 for 44559 <at> debbugs.gnu.org; Thu, 12 Nov 2020 16:18:24 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:60912) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from <marius@HIDDEN>) id 1kdJz0-0008U8-Uo; Thu, 12 Nov 2020 16:18:18 -0500 Received: from host-37-191-236-253.lynet.no ([37.191.236.253]:39570 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from <marius@HIDDEN>) id 1kdJz0-0004U6-DJ; Thu, 12 Nov 2020 16:18:18 -0500 From: Marius Bakke <marius@HIDDEN> To: Ludovic =?utf-8?Q?Court=C3=A8s?= <ludo@HIDDEN>, Christopher Baines <mail@HIDDEN> Subject: Re: bug#44559: gnutls 3.6.12 fails to build: FAIL: status-request-revoked In-Reply-To: <87v9eaffpa.fsf@HIDDEN> References: <87d00los2d.fsf@HIDDEN> <87v9eaffpa.fsf@HIDDEN> Date: Thu, 12 Nov 2020 22:18:16 +0100 Message-ID: <87zh3mb7fr.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 44559 Cc: 44559 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s <ludo@HIDDEN> writes: > The question for us becomes how to ensure long-term reproducibility in > the presence of such bugs. > > In this case, I think the only solution would be to change the system > clock when one rebuilds GnuTLS (or to use =E2=80=98--without-tests=3Dgnut= ls=E2=80=99, but > you end up with different derivations, which is not necessarily > desirable). > > Thoughts? There is a related bug report here: https://issues.guix.gnu.org/39310 Perhaps we could make a "--with-system-clock" option for 'guix build' that instructs the daemon to fake the system time? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFDBAEBCgAtFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAl+tppgPHG1hcml1c0Bn bnUub3JnAAoJEKKgbfKjOlT6SZUH/2JQce28Rehio2Dk1QbAXM2/8Peo8xhfOnA8 NYzJuUkjaqf8LNEs7uB/4zGsJ51IHznTqLecuqdjO+g6zEpzzNrdXmvVqv9A2Xcy GGa+ci5hUVKErrG+KGTQEiEtkRUjkzBKGZKv2jc4MpnXJgsDl0qidIZIOi/JmuC1 vtSTVM09dG8pj79MefTFKuJtRv0xEpXNRiaJNOjHO5jiThimoiKl15XtSgexPgU0 mzv9MV2Po3QRbhc/EE49P/oxuJqjmwFSPdCwL/0YlNEemr2bQx18ps6H9y9Hmg7W 5awKGRn0vAK5I45i0jyJyVWHk0a90lEIJSLwJF4Pul2CmpJsVm0= =g9FH -----END PGP SIGNATURE----- --=-=-=--
bug-guix@HIDDEN
:bug#44559
; Package guix
.
Full text available.Received: (at 44559) by debbugs.gnu.org; 12 Nov 2020 21:06:32 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Thu Nov 12 16:06:32 2020 Received: from localhost ([127.0.0.1]:45762 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1kdJnc-0007zM-Ec for submit <at> debbugs.gnu.org; Thu, 12 Nov 2020 16:06:32 -0500 Received: from eggs.gnu.org ([209.51.188.92]:52392) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <ludo@HIDDEN>) id 1kdJnY-0007z7-Mo for 44559 <at> debbugs.gnu.org; Thu, 12 Nov 2020 16:06:30 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:60534) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from <ludo@HIDDEN>) id 1kdJnT-0006wN-2p; Thu, 12 Nov 2020 16:06:23 -0500 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=58544 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from <ludo@HIDDEN>) id 1kdJnH-0003Tt-Md; Thu, 12 Nov 2020 16:06:22 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN> To: Christopher Baines <mail@HIDDEN> Subject: Re: bug#44559: gnutls 3.6.12 fails to build: FAIL: status-request-revoked References: <87d00los2d.fsf@HIDDEN> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 22 Brumaire an 229 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Thu, 12 Nov 2020 22:06:09 +0100 In-Reply-To: <87d00los2d.fsf@HIDDEN> (Christopher Baines's message of "Tue, 10 Nov 2020 20:49:46 +0000") Message-ID: <87v9eaffpa.fsf@HIDDEN> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 44559 Cc: 44559 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -3.3 (---) Hi, Christopher Baines <mail@HIDDEN> skribis: > I found this when trying to build guile3.0-gnutls: > > guix time-machine --commit=3D94585fffb23079fe71110e2bf99782eb4ccfa12b -= - build --no-grafts --check guile3.0-gnutls >=20=20=20 > > FAIL: status-request-revoked > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > > trying NORMAL:-VERS-ALL:+VERS-TLS1.2 > received status request > received status request > cert_verify_callback:263: certificate verify status doesn't match: 100402= !=3D 22FAIL status-request-revoked (exit status: 1) This was fixed upstream between 3.6.12 and 3.6.14 with this patch by Bernhard (it=E2=80=99s a small world!): --8<---------------cut here---------------start------------->8--- commit ed208fe55f31478732fd6cc394f9576b315a42cd Author: Bernhard M. Wiedemann <bwiedemann@HIDDEN> Date: Sun Apr 5 15:09:57 2020 +0200 tests: Fix status-request-revoked after 2020-10-24 =20=20=20=20 included certs expire 2020-10-24 so this test fails after that date. =20=20=20=20 Fixes #967 =20=20=20=20 This patch was done while working on reproducible builds for openSUSE. =20=20=20=20 Signed-off-by: Bernhard M. Wiedemann <bwiedemann@HIDDEN> --8<---------------cut here---------------end--------------->8--- The question for us becomes how to ensure long-term reproducibility in the presence of such bugs. In this case, I think the only solution would be to change the system clock when one rebuilds GnuTLS (or to use =E2=80=98--without-tests=3Dgnutls= =E2=80=99, but you end up with different derivations, which is not necessarily desirable). Thoughts? Ludo=E2=80=99.
bug-guix@HIDDEN
:bug#44559
; Package guix
.
Full text available.Received: (at submit) by debbugs.gnu.org; 10 Nov 2020 20:49:59 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Nov 10 15:49:59 2020 Received: from localhost ([127.0.0.1]:39088 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1kcaaV-0005ei-8g for submit <at> debbugs.gnu.org; Tue, 10 Nov 2020 15:49:59 -0500 Received: from lists.gnu.org ([209.51.188.17]:35650) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <mail@HIDDEN>) id 1kcaaU-0005ea-CK for submit <at> debbugs.gnu.org; Tue, 10 Nov 2020 15:49:58 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:43242) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <mail@HIDDEN>) id 1kcaaU-0003Ye-4q for bug-guix@HIDDEN; Tue, 10 Nov 2020 15:49:58 -0500 Received: from mira.cbaines.net ([2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27]:54923) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from <mail@HIDDEN>) id 1kcaaS-00022d-I3 for bug-guix@HIDDEN; Tue, 10 Nov 2020 15:49:57 -0500 Received: from localhost (188.28.119.85.threembb.co.uk [188.28.119.85]) by mira.cbaines.net (Postfix) with ESMTPSA id 295F427BBF6 for <bug-guix@HIDDEN>; Tue, 10 Nov 2020 20:49:54 +0000 (GMT) Received: from capella (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id fac78429 for <bug-guix@HIDDEN>; Tue, 10 Nov 2020 20:49:51 +0000 (UTC) User-agent: mu4e 1.4.13; emacs 27.1 From: Christopher Baines <mail@HIDDEN> To: bug-guix@HIDDEN Subject: gnutls 3.6.12 fails to build: FAIL: status-request-revoked Date: Tue, 10 Nov 2020 20:49:46 +0000 Message-ID: <87d00los2d.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2a01:7e00:e000:2f8:fd4d:b5c7:13fb:3d27; envelope-from=mail@HIDDEN; helo=mira.cbaines.net X-detected-operating-system: by eggs.gnu.org: First seen = 2020/11/10 15:49:54 X-ACL-Warn: Detected OS = ??? X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -2.3 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable I found this when trying to build guile3.0-gnutls: guix time-machine --commit=3D94585fffb23079fe71110e2bf99782eb4ccfa12b -- = build --no-grafts --check guile3.0-gnutls =20=20 FAIL: status-request-revoked =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D trying NORMAL:-VERS-ALL:+VERS-TLS1.2 received status request received status request cert_verify_callback:263: certificate verify status doesn't match: 100402 != =3D 22FAIL status-request-revoked (exit status: 1) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKlBAEBCgCPFiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl+q/OpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcRHG1haWxAY2Jh aW5lcy5uZXQACgkQXiijOwuE9Xd51BAAinwaFsmiRFUPttJP9RutzROS0rh7e8yL 83pkM//kJoP+KDqfRNJ3eRz7sHwiWD5hbdn/Yyi4a0sAwKgHNuJhvU5ijWBLOzWJ 0sFk0QrDZfeejamtYikssHasYJfwXm9gE2SzQJJq1E6SxsMcfjbpwsmw0Pl2K2LI ptg7H3wMaj9ooLxVMVNfswSAGpka1fdpWIYIElgU8fqJ3uSOhMizpiSzpgh73FXa dqntLA7/5Bzuk4h6C71TfNRQIJbqeT27SB5fnacUl5faSa7oyqyGF899+iDyvVnC Vek6YqzvDLIaVdZrBVs1jkCeUY0LWOStK6/36n++ZPaj26aV1V2yxLztzj77ARZ5 S4K9p4ccq780SMT4QiJSgFMnpyr3bga/Wl/WmNGABgaVfzTU68LfPhV+Td4QTvOc RX5kgfZ68+lZ5oVTWD5DwTs3ZRh+IS3MBul3qA4Y56DDc80QrVeWKheDxbVaB5Vh ya+OP+Pr8b9qJjzUvhO8HGj/ilp8XzgGySCLmS7Px0xVzEELIuqgqqCgNYCH820D aFgctowjhLF7whaPZs+aDuDj8mXV+ATnEJLKDRtO4d8dmIy6bE9E8fupEu4u2HtU 8Y3xthQboMoYUUM39fLg73W3pY6XdJBYbPlxavnruijlyJ45awYL//q4uLNgBbKm uJsXQF4C9lI= =PIzS -----END PGP SIGNATURE----- --=-=-=--
Christopher Baines <mail@HIDDEN>
:bug-guix@HIDDEN
.
Full text available.bug-guix@HIDDEN
:bug#44559
; Package guix
.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.