[debian-mysql] Bug#660799: mysql-5.5: Fails to build in the presence of libssl-dev

[Nicholas Bamber]

Package: mysql-5.5
Version: 5.5.17-4
Severity: serious
Tags: upstream
Justification: Policy 4.2

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
I tried to build mysql-5.5 and I found that the main.openssl_1 test failed.
Eventually I found that my build log contained the following lines:

-- Found OpenSSL: /usr/lib/i386-linux-gnu/libssl.so;/usr/lib/i386-linux-gnu/libcrypto.so (found version "1..")^M
main.openssl_1                           [ fail ]^M
        Test ended at 2012-02-17 20:23:59^M
^M
CURRENT_TEST: main.openssl_1^M
ERROR 2026 (HY000): SSL connection error: SSL_CTX_new failed^M
ERROR 2026 (HY000): SSL connection error: SSL_CTX_new failed^M
ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
ERROR 2026 (HY000): SSL connection error: SSL_CTX_new failed^M
ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
ERROR 2026 (HY000): SSL connection error: SSL_CTX_new failed^M
ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
--- /home/nicholas/debian/exp/mysql-5.5-5.5.17/builddir/mysql-test/r/openssl_1.result   2012-02-17 20:17:49.000000000 +0300^M
+++ /home/nicholas/debian/exp/mysql-5.5-5.5.17/builddir/mysql-test/r/openssl_1.reject   2012-02-17 23:23:58.000000000 +0300^M
@@ -44,9 +44,9 @@^M
 drop user ssl_user1 at localhost, ssl_user2 at localhost,^M
 ssl_user3 at localhost, ssl_user4 at localhost, ssl_user5 at localhost;^M
 drop table t1;^M
-mysqltest: Could not open connection 'default': 2026 SSL connection error: ASN: bad other signature confirmation^M
-mysqltest: Could not open connection 'default': 2026 SSL connection error: ASN: bad other signature confirmation^M
-mysqltest: Could not open connection 'default': 2026 SSL connection error: ASN: bad other signature confirmation^M
+mysqltest: Could not open connection 'default': 2026 SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
+mysqltest: Could not open connection 'default': 2026 SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
+mysqltest: Could not open connection 'default': 2026 SSL connection error: error:00000001:lib(0):func(0):reason(1)^M
 SSL error: Unable to get private key from ''^M


However the build log on the Debian website contains:
-- Could NOT find OpenSSL, try to set the path to OpenSSL root folder in the system variable OPENSSL_ROOT_DIR (missing:  OPENSSL_LIBRARIES OPENSSL_INCLUDE_DIR) 
main.openssl_1                           [ pass ]    701

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
I managed to run the test in isolation using mysql-test-run.pl main.openssl_1.
I managed to reproduce the failure in pure tarballs with "cmake -DWITH_SSL=1 .'
in both 5.5.17 and 5.5.20. Hence we know that this is an upstream issue and
will not be fixed by simply upgrading to the latest version.
I managed to reproduce the apparently benign error in the Debian build log file
by copying the cmake options from that log file and removing libssl-dev from the
system.


   * What was the outcome of this action?
   * What outcome did you expect instead?
So I conclude that libssl-dev should be a build dependency but that when it
is added the package will no longer build until this issue is addressed.

In order to further investigate I intend to do as follows:
1.) Install the experimental package and see if SSL based connections work as
the documentation would lead one to expect.
2.) As I understand it the source contains all the certficate data that
would be required. (I have not actually checked if the certificates are valid.)
I can see no obvious reason why the test is failing, if the options are being
combined from the mysqltest command line and the my.cnf file and that the latter
is found. I have not confirmed that those suppositions are true.

*** End of the template - remove these lines ***


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash