Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

7.88.0 test fail : 320 321 322 324 #10522

Closed
fundawang opened this issue Feb 15, 2023 · 5 comments
Closed

7.88.0 test fail : 320 321 322 324 #10522

fundawang opened this issue Feb 15, 2023 · 5 comments

Comments

@fundawang
Copy link

I did this

Build curl 7.88.0 under Anolis OS (Fedora rawhide based), with openssl 3.0.7

I expected the following

Test succeed

curl/libcurl version

7.88.0

operating system

Anolis OS (Fedora rawhide based), with openssl 3.0.7

I've attached the cutted build.log , and full build log here:
https://build.openanolis.cn/taskinfo?taskID=537820

FYI, if ssl settings needed, it goes the same with RHEL9.

@bagder bagder added the tests label Feb 15, 2023
@bagder
Copy link
Member

bagder commented Feb 15, 2023

 curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 127.0.0.1:25014 

What OpenSSL is this? Does it know SRP?

@bagder bagder added the TLS label Feb 15, 2023
@bagder
Copy link
Member

bagder commented Feb 15, 2023

Oh, it might your gnutls-serv that does not support SRP based on this output:

 Syntax error at: +SRP

... I wonder how we could figure that out!?

@fundawang
Copy link
Author

fundawang commented Feb 15, 2023

Oh, it might your gnutls-serv that does not support SRP based on this output:

 Syntax error at: +SRP

... I wonder how we could figure that out!?

Is it caused by gnutls 3.8.0?

** libgnutls: SRP authentication is now disabled by default.
It is disabled because the SRP authentication in TLS is not up to
date with the latest TLS standards and its ciphersuites are based
on the CBC mode and SHA-1.

@bagder
Copy link
Member

bagder commented Feb 15, 2023

It could be disabled in earlier versions as well. The test suite should check if gnutls-serv actually supports it before using it, but it's not clear how to do it.

I suppose the gnutls-serv -l output is the key somehow.

@fundawang
Copy link
Author

Thanks, the patch works as expected, the tests are skipped.

bagder added a commit that referenced this issue Feb 15, 2023
Reported-by: fundawang on github
Fixes #10522
Closes #10524
bch pushed a commit to bch/curl that referenced this issue Jul 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging a pull request may close this issue.

2 participants