evptest: set the DESX provider to be the legacy provider.#11573
evptest: set the DESX provider to be the legacy provider.#11573paulidale wants to merge 1 commit intoopenssl:masterfrom
Conversation
|
I'm marked this as urgent because it fixes a CI break. |
Not sure what you mean by that... all other DES related tests in that file are Triple-DES, which is still in the default provider... |
I think @paulidale meant why isn't this the case on all other platforms other than MAC. I'd still like to understand that. |
|
D'oh, Mac, not MAC! |
|
I just tried it manually on my Linux box: However: I have no clue yet why there's a difference... |
|
Oh never mind, that's a config difference... still digging |
|
This has me a bit worried: |
That's the second error. I did a very little digging today but didn't make any progress. My Mac build environment isn't ideal (gdb doesn't work and lldb is alien) and I'm quite stumped by why it tries to local from /usr/local. |
Maybe start by reverting the fipsinstall changes to see that this is what causes the issue.. |
|
I've approved this now, because this PR does fix one issue, and needs to go in. It's ridiculous that this should be blocked because we have issues figuring out another issue. Let's take that to another PR. |
|
I think this is a band aid solution.. |
|
A better fix would be to revert the change that broke things until it is fixed. (Which I think is related to making the fips install perl code shared) |
|
@slontis, this PR modifies evpciph.txt to ssay the DESX-CBC is available in the legacy provider, i.e. that the legacy provider must be present to perform that particular test. If that's a band-aid and you want to undo the underlying change, then we should partially revert #11419. The other issue, which is that |
|
Err... Can you tell me what caused this to break? |
I actually have no idea. I just looked at the test_evp, and realised that we run with default+legacy or fips only, so So, I don't quite know what's going on specifically with DESX-CBC, I just cannot see how that's related to the FIPS provider, at all. |
|
So, fipsinstall.pl stuff worked out (see #11592). However, that still doesn't invalidate this PR. It should go in. |
|
Can this be merged now? |
|
I don't think this is a build breaking fix with the reversion of the fipsinstall.pl. |
It isn't... should we add a run of evp_test where we only use the legacy provider? That would certainly uncover this kind of error. Not sure it's worth the while, though. |
Reviewed-by: Richard Levitte <[email protected]> (Merged from #11573)
|
Merged to master, thanks. |
This fixes the first of the two Mac build errors. In this case the legacy provider isn't being used for DESX and the load fails. It's not clear why this isn't the case everywhere else.