Re: Errors while running make check after compiling Heimdal 1.5.3 on RHEL 6.5

Hi Paul,

1.5.3 is pretty old and the Heimdal developers do not really support
it. It's best to go with 1.6 at this point. My hunch is that 1.6.0
will be released this year. I've also seen at least one bug in the KDC
that was solved by simply upgrading to 1.6.

Here are some RHEL 6 binaries if you want to test:
http://ktdreyer.fedorapeople.org/heimdal/

By the way, for Red Hat users, I've updated the Red Hat package review
bug at https://bugzilla.redhat.com/613001 . And for the devs, I needed
two patches, https://github.com/heimdal/heimdal/pull/90 and
https://github.com/heimdal/heimdal/pull/91 .

- Ken

On Tue, Apr 29, 2014 at 9:05 AM, Paul Robert Marino <[email protected]> wrote:
> I ran int to some errors while running make check after compiling
> Heimdal 1.5.3 on RHEL 6.5
> Im using the RPM spec file and patch's from here
>
> it all looks good until I get to here
> "
> ocsp verify exists
> ocsp verify not exists
> ocsp verify revoked
> crl non-revoked cert
> crl revoked cert
> eccert -> root
> FAIL: test_chain
> create signed data (ec)
> lt-hxtool: hx509_certs_find: Certificate not found
> FAIL: test_cms
> Bleichenbacher good cert (from eay)
> Bleichenbacher bad cert (from eay)
> Bleichenbacher good cert (from yutaka)
> Bleichenbacher bad cert (from yutaka)
> "
>
> does any one have any ideas on what might be wrong?
>
>
>
>
> here is the full make check output
> make check
> Making check in include
> make[1]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> Making check in kadm5
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/kadm5'
> make  check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/kadm5'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/kadm5'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/kadm5'
> Making check in hcrypto
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/hcrypto'
> make  check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/hcrypto'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/hcrypto'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/hcrypto'
> Making check in gssapi
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/gssapi'
> make  check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/gssapi'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/gssapi'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include/gssapi'
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> make  check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> make[1]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/include'
> Making check in base
> make[1]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> make  test_base
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> make[2]: `test_base' is up to date.
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> make  check-local
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> make[1]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/base'
> Making check in lib
> make[1]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib'
> Making check in roken
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make  check-am
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make  base64-test getaddrinfo-test getifaddrs-test hex-test
> test-readenv parse_bytes-test parse_reply-test parse_time-test
> snprintf-test strpftime-test tsearch-test
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make[4]: `base64-test' is up to date.
> make[4]: `getaddrinfo-test' is up to date.
> make[4]: `getifaddrs-test' is up to date.
> make[4]: `hex-test' is up to date.
> make[4]: `test-readenv' is up to date.
> make[4]: `parse_bytes-test' is up to date.
> make[4]: `parse_reply-test' is up to date.
> make[4]: `parse_time-test' is up to date.
> make[4]: `snprintf-test' is up to date.
> make[4]: `strpftime-test' is up to date.
> make[4]: `tsearch-test' is up to date.
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make  check-TESTS check-local
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> PASS: base64-test
> PASS: getaddrinfo-test
> PASS: getifaddrs-test
> PASS: hex-test
> PASS: test-readenv
> PASS: parse_bytes-test
> PASS: parse_reply-test
> PASS: parse_time-test
> PASS: snprintf-test
> PASS: strpftime-test
> PASS: tsearch-test
> ===================
> All 11 tests passed
> ===================
> PASS: snprintf-test
> PASS: resolve-test
> PASS: rkpty
> PASS: make-roken
> ==================
> All 4 tests passed
> ==================
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/roken'
> Making check in vers
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/vers'
> make  check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/vers'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/vers'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/vers'
> Making check in sl
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> make  test_sl
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> make[3]: `test_sl' is up to date.
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> make  check-TESTS check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> PASS: test_sl
> =============
> 1 test passed
> =============
> PASS: slc
> ==================
> All 1 tests passed
> ==================
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/sl'
> Making check in wind
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make  check-am
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make  test-bidi test-map test-rw test-normalize test-prohibited
> test-punycode test-ldap test-utf8
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make[4]: `test-bidi' is up to date.
> make[4]: `test-map' is up to date.
> make[4]: `test-rw' is up to date.
> make[4]: `test-normalize' is up to date.
> make[4]: `test-prohibited' is up to date.
> make[4]: `test-punycode' is up to date.
> make[4]: `test-ldap' is up to date.
> make[4]: `test-utf8' is up to date.
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make  check-TESTS check-local
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> PASS: test-bidi
> PASS: test-map
> PASS: test-rw
> PASS: test-normalize
> PASS: test-prohibited
> PASS: test-punycode
> PASS: test-ldap
> PASS: test-utf8
> ==================
> All 8 tests passed
> ==================
> PASS: idn-lookup
> ==================
> All 1 tests passed
> ==================
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/wind'
> Making check in asn1
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make  check-am
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make  check-der check-gen check-timegm check-ber check-template
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make[4]: `check-timegm' is up to date.
> make[4]: `check-ber' is up to date.
> make[4]: `check-template' is up to date.
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make  check-TESTS check-local
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> PASS: check-der
> PASS: check-gen
> PASS: check-timegm
> PASS: check-ber
> PASS: check-template
> ==================
> All 5 tests passed
> ==================
> PASS: asn1_compile
> PASS: asn1_print
> PASS: asn1_gen
> ==================
> All 3 tests passed
> ==================
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/asn1'
> Making check in ipc
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/ipc'
> make  check-TESTS check-local
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/ipc'
> ==================
> All 0 tests passed
> ==================
> PASS: tc
> PASS: ts
> PASS: ts-http
> ==================
> All 3 tests passed
> ==================
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/ipc'
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/ipc'
> Making check in hx509
> make[2]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make  check-am
> make[3]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make  test_name test_expr test_soft_pkcs11 test_ca test_cert
> test_chain test_cms test_crypto test_nist test_nist2 test_pkcs11
> test_java_pkcs11 test_nist_cert test_nist_pkcs12 test_req test_windows
> test_query
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make[4]: `test_expr' is up to date.
> make[4]: `test_soft_pkcs11' is up to date.
> make[4]: `test_ca' is up to date.
> make[4]: `test_cert' is up to date.
> make[4]: `test_chain' is up to date.
> make[4]: `test_cms' is up to date.
> make[4]: `test_crypto' is up to date.
> make[4]: `test_nist' is up to date.
> make[4]: `test_nist2' is up to date.
> make[4]: `test_pkcs11' is up to date.
> make[4]: `test_java_pkcs11' is up to date.
> make[4]: `test_nist_cert' is up to date.
> make[4]: `test_nist_pkcs12' is up to date.
> make[4]: `test_req' is up to date.
> make[4]: `test_windows' is up to date.
> make[4]: `test_query' is up to date.
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make  check-TESTS check-local
> make[4]: Entering directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> create certificate request
> issue certificate
> verify certificate
> issue crl (no cert)
> verify certificate (with CRL)
> issue crl (with cert)
> verify certificate (included in CRL)
> issue crl (with cert)
> verify certificate (included in CRL, and lifetime 1 month)
> issue certificate (10years 1 month)
> issue certificate (with https ekus)
> issue certificate (pkinit KDC)
> issue certificate (pkinit client)
> issue certificate (hostnames)
> verify certificate hostname (ok)
> verify certificate hostname (fail)
> verify certificate hostname (fail)
> issue certificate (hostname in CN)
> verify certificate hostname (ok)
> verify certificate hostname (fail)
> issue certificate (email)
> issue certificate (email, null subject DN)
> issue certificate (jabber)
> issue self-signed cert
> issue ca cert
> issue self-signed ca cert
> issue proxy certificate
> verify proxy cert
> issue ca cert (generate rsa key)
> issue sub-ca cert (generate rsa key)
> issue ee cert (generate rsa key)
> issue sub-ca ee cert (generate rsa key)
> verify certificate (ee)
> verify certificate (sub-ee)
> path ok
> sign CMS signature (generate key)
> verify CMS signature (generate key)
> extend ca cert
> verify certificate generated by previous ca
> extend ca cert (template)
> verify certificate generated by previous ca
> extend sub-ca cert (template)
> verify certificate (sub-ee) with extended chain
> +++++++++++ test basic constraints
> extend ca cert (too low path-length constraint)
> verify failure of certificate (sub-ee) with path-length constraint
> extend ca cert (exact path-length constraint)
> verify certificate (sub-ee) with exact path-length constraint
> Check missing basicConstrants.isCa
> verify failure certificate (sub-ee) with missing isCA
> issue ee cert (crl uri)
> issue null subject cert
> verify certificate null subject
> PASS: test_ca
> print DIR
>     issuer:  "CN=w#002#00k#008#00r#002#00.#00m#00a#00t#00w#00s#00.#00n#00e#00t#00#00#00"
>     subject: "CN=w#002#00k#008#00r#002#00.#00m#00a#00t#00w#00s#00.#00n#00e#00t#00#00#00"
>     serial: -428920BDB8F5FF72B8C18BC05E237443
> no    issuer:  "CN=pkinit,C=SE"
>     subject: "CN=pkinit-proxy,CN=pkinit,C=SE"
>     serial: E15DFFA23D3A5CB9
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=Test cert,C=SE"
>     subject: "CN=proxy10,CN=Test cert,C=SE"
>     serial: C244BF09D1D7EDD6
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=Test cert,C=SE"
>     subject: "CN=no-proxy,CN=Test cert,C=SE"
>     serial: C244BF09D1D7EDD5
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=pkinit,C=SE"
>     subject: "CN=pkinit-proxy,CN=pkinit,C=SE"
>     serial: E15DFFA23D3A5CB9
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=pkinit,C=SE"
>     serial: 06
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=child,CN=proxy10,CN=Test cert,C=SE"
>     subject: "CN=child,CN=child,CN=proxy10,CN=Test cert,C=SE"
>     serial: DB52B28E05FD83E8
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=Server test cert (512 bit),O=CryptSoft Pty
> Ltd,S=Queensland,C=AU"
>     subject: "CN=Server test cert (512 bit),O=CryptSoft Pty
> Ltd,S=Queensland,C=AU"
>     serial: 06
>
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Sub CA,C=SE"
>     serial: 0A
> cRLSign, keyCertSign, keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=kdc,C=SE"
>     serial: 08
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=Server,O=Heimdal,C=SE"
>     serial: DD57CCD927137942
>
>     issuer:  "CN=Server test cert (512 bit),O=CryptSoft Pty
> Ltd,S=Queensland,C=AU"
>     subject: "CN=Server test cert (512 bit),O=CryptSoft Pty
> Ltd,S=Queensland,C=AU"
>     serial: 06
>
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=CA secp160r1,O=Heimdal,C=SE"
>     serial: A8CC612FFA10E2DD
> no    issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Test cert DigitalSignature,C=SE"
>     serial: 05
> nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Test cert,C=SE"
>     serial: 02
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=www.test.h5l.se,C=SE"
>     serial: 09
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=Test cert,C=SE"
>     subject: "CN=proxy,CN=Test cert,C=SE"
>     serial: C244BF09D1D7EDD4
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=pkinit-ec,C=SE"
>     serial: 07
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=Server,O=Heimdal,C=SE"
>     serial: DD57CCD927137942
>
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=CA secp160r1,O=Heimdal,C=SE"
>     serial: A8CC612FFA10E2DD
> no    issuer:  "OU=BridgeCA,OU=Prefectural Association For JPKI,O=JPKI,C=JP"
>     subject: "OU=BridgeCA,OU=Prefectural Association For JPKI,O=JPKI,C=JP"
>     serial: 01
> cRLSign, keyCertSign
>     issuer:  "OU=Starfield Class 2 Certification Authority,O=Starfield
> Technologies\, Inc.,C=US"
>     subject: "OU=Starfield Class 2 Certification Authority,O=Starfield
> Technologies\, Inc.,C=US"
>     serial:
> no    issuer:  "CN=Sub CA,C=SE"
>     subject: "CN=Test sub cert,C=SE"
>     serial: 0B
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=OCSP responder,C=SE"
>     serial: 01
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     subject: "CN=www2.example.jp,O=TEST 2 CLIENT,S=Tokyo,C=JP"
>     serial: E4A7CC4E10C761FF
> no    issuer:  "CN=proxy,CN=Test cert,C=SE"
>     subject: "CN=child,CN=proxy,CN=Test cert,C=SE"
>     serial: FEA1C7645B807BEB
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Revoke cert,C=SE"
>     serial: 03
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=Client,O=Heimdal,C=SE"
>     serial: DD57CCD927137943
>
>     issuer:  "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     subject: "CN=www2.example.jp,O=TEST 2 CLIENT,S=Tokyo,C=JP"
>     serial: E4A7CC4E10C761FF
> no    issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "C=SE,CN=hx509 Test Root CA"
>     serial: 9932DE610E40198A
> cRLSign, keyCertSign, keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=pkinit,C=SE"
>     serial: 06
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "CN=CA secp160r1,O=Heimdal,C=SE"
>     subject: "CN=Client,O=Heimdal,C=SE"
>     serial: DD57CCD927137943
>
>     issuer:  "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     subject: "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     serial: E4A7CC4E10C761FE
> no    issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Test cert KeyEncipherment,C=SE"
>     serial: 04
> keyEncipherment, nonRepudiation
>     issuer:  "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     subject: "CN=CA TEST 1-4,O=CA TEST 1-4,C=JP"
>     serial: E4A7CC4E10C761FE
> no    issuer:  "CN=proxy10,CN=Test cert,C=SE"
>     subject: "CN=child,CN=proxy10,CN=Test cert,C=SE"
>     serial: E3701B15D18FD8E2
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=Test cert,C=SE"
>     serial: 02
> keyEncipherment, nonRepudiation, digitalSignature
>     issuer:  "OU=Starfield Class 2 Certification Authority,O=Starfield
> Technologies\, Inc.,C=US"
>     subject: "CN=Hacker"
>     serial: 17
> noprint FILE
> print NULL
> copy dance
> verify n0ll cert (fail)
> no certs verify at all
> verify n0ll cert (fail)
> no certs verify at all
> check that windows cert with utf16 in printable string works
> path ok
> PASS: test_cert
> cert -> root
> cert -> root
> cert -> root
> sub-cert -> root
> sub-cert -> sub-ca -> root
> sub-cert -> sub-ca
> sub-cert -> sub-ca -> root
> sub-cert -> sub-ca -> root
> sub-cert -> sub-ca -> root
> max depth 2 (ok)
> max depth 1 (fail)
> ocsp non-ca responder
> ocsp ca responder
> ocsp no-ca responder, missing cert
> ocsp no-ca responder, missing cert, in pool
> ocsp no-ca responder, keyHash
> ocsp revoked cert
> ocsp print reply resp1-ocsp-no-cert
> ocsp print reply resp1-ca
> ocsp print reply resp1-keyhash
> ocsp print reply resp2
> ocsp verify exists
> ocsp verify not exists
> ocsp verify revoked
> crl non-revoked cert
> crl revoked cert
> eccert -> root
> FAIL: test_chain
> create signed data (ec)
> lt-hxtool: hx509_certs_find: Certificate not found
> FAIL: test_cms
> Bleichenbacher good cert (from eay)
> Bleichenbacher bad cert (from eay)
> Bleichenbacher good cert (from yutaka)
> Bleichenbacher bad cert (from yutaka)
> Bleichenbacher bad cert (sf pad correct)
> Read 50 kilobyte random data
> crypto select1
> crypto select1
> crypto select2
> crypto select3
> crypto select4
> crypto select5
> crypto select6
> crypto select7
> crypto available2
> copy keystore FILE existing -> FILE
> copy keystore FILE -> FILE
> copy keystore FILE -> PKCS12
> print certificate with utf8
> Make sure that we can parse EC private keys
>     issuer:  "C=SE,CN=hx509 Test Root CA"
>     subject: "CN=pkinit-ec,C=SE"
>     serial: 07
> keyEncipherment, nonRepudiation, digitalSignature
> PASS: test_crypto
> nist tests
> done!
> PASS: test_nist
> nist tests, version 2
> done!
> PASS: test_nist2
> password less
> password
> done
> PASS: test_pkcs11
> PASS: test_java_pkcs11
> PASS: test_nist_cert
> nist pkcs12 tests
> done!
> PASS: test_nist_pkcs12
> PASS: test_req
> Create trust anchor
> Create domain controller cert
> Create user cert
> Create crl
> PASS: test_windows
> try printing
> try printing
> make sure entry is found (friendlyname)
> make sure entry is not found  (friendlyname)
> make sure entry is found (eku)
> make sure entry is not found  (eku)
> make sure entry is found (friendlyname, no-pw)
> check for ca cert (friendlyname)
> make sure entry is not found (friendlyname)
> make sure entry is found (friendlyname|private key)
> make sure entry is not found (friendlyname|private key)
> make sure entry is found (cert ds)
> make sure entry is found (cert ke)
> make sure entry is found (cert ke + ds)
> make sure entry is found (cert-ds ds)
> make sure entry is not found (cert-ds ke)
> make sure entry is not found (cert-ds ke + ds)
> make sure entry is not found (cert-ke ds)
> make sure entry is found (cert-ke ke)
> make sure entry is not found (cert-ke ke + ds)
> make sure entry is found (eku) in query language
> make sure entry is not found (eku) in query language
> make sure entry is found (subject) in query language
> make sure entry is found using TAILMATCH (subject) in query language
> make sure entry is not found using TAILMATCH (subject) in query language
> make sure entry is found (issuer) in query language
> make sure entry match with EKU and TAILMATCH in query language
> make sure entry match with hash.sha1
> PASS: test_query
> PASS: test_name
> PASS: test_expr
> =====================================
> 2 of 16 tests failed
> Please report to [email protected]
> =====================================
> make[4]: *** [check-TESTS] Error 1
> make[4]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make[3]: *** [check-am] Error 2
> make[3]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make[2]: *** [check] Error 2
> make[2]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib/hx509'
> make[1]: *** [check-recursive] Error 1
> make[1]: Leaving directory
> `/root/rpmbuild/BUILD/heimdal-b074e0b60d4eb6a316535f929032a76e1ebf8c0a/lib'
> make: *** [check-recursive] Error 1