Change:
A clear and concise description of what the bug is. Failed to run , caused by the failure of building . Run confirms this proflem Steps to reproduce the behavior: A clear and concise description of what you expected to happen. should succeed. If applicable, add screenshots to help explain your problem. Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result.
FYI: succeeds on .
builds fine (using nix-shell) on unstable fails with: It seems it has something to do with the recent update of openssl:
After bisecting the error, I get this commit to be responsible: my bisecting commands:
I did a git bisect. This is the result: <details</detailsThe obvious change here is the update of curl 7.81.0 -7.82.0.
Oh, we did the same. I investigated more and found and This seems to be the fix:
I'm kinda new to nix and I would be happy making a PR with the patch :) If you haven't already started
No not yet. https://patch- is probably the patch file (generated from ) you are looking for. Adding this to should fix the issue. I don't have time right now, so if you want to create the PR, I'd be happy :smile:
I'm curious, what kind of bisect did you do? because you didn't get the same commit
I ran which should give me the complete merge commits (like staging) and works faster when doing rebuilds. Then I read what changed in that merge and look for possible candidates. I look at for the history of and look for the first good commit and bisect between those.
Oh thanks a lot! I was wondering if there was a way to get this history of commits, because yeah, it took a while to compile all those commits without hydra cache ;) and yeah makes a lot of sense too
yeah, that was my issue, too. Thanks for posting your command, I think next time I'll use the command as well. (Did the bisect manually)
I think this is fixed by (well it just disables the tests, but it works). Its stuck in staging though
yeah. We shouldn't disable these tests. They detected a regression in curl and this is why we have them, isn't it?
I agree, I'm going ahead with the PR with the proper patch.

Discussion:
<ins> From 911714d617c106ed5d553bf003e34ec94ab6a136 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg <daniel@haxx.se> Date: Tue, 8 Mar 2022 13:38:13 +0100 Subject: [PATCH] openssl: fix CN check error code Due to a missing 'else' this returns error too easily. Regressed in: d15692ebb Reported-by: Kristoffer Gleditsch Fixes #8559 Closes #8560 --- lib/vtls/openssl.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 0b79fc50a9c5..4618beeb3867 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -1817,7 +1817,8 @@ CURLcode Curl_ossl_verifyhost(struct Curl_easy *data, struct connectdata *conn, memcpy(peer_CN, ASN1_STRING_get0_data(tmp), peerlen); peer_CN[peerlen] = '0'; } -            result = CURLE_OUT_OF_MEMORY; +            else +              result = CURLE_OUT_OF_MEMORY; } } else /* not a UTF8 name */ </ins>

patches = [ ./7.79.1-darwin-no-systemconfiguration.patch <ins> ./7.82.0-openssl-fix-CN-check.patch </ins> ]; outputs = [ "bin" "dev" "out" "man" "devdoc" ];