Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18135

binlog_encryption.encrypted_slave, main.pool_of_threads and connect tests fail in buildbot with SSL error

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 10.3(EOL)
    • 10.4(EOL)
    • SSL, Tests
    • None

    Description

      http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112

      binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ fail ]  Found warnings/errors in server log file!
      		 
              Test ended at 2019-01-04 04:53:42
      		 
      line
      		 
      2019-01-04  4:53:38 0 [Warning] SSL error: Unable to get certificate
      		 
      2019-01-04  4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
      		 
      ^ Found warnings in /dev/shm/var/1/log/mysqld.1.err
      		 
      ok
      		 
      line
      		 
      2019-01-04  4:53:38 0 [Warning] SSL error: Unable to get certificate
      		 
      2019-01-04  4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
      		 
      ^ Found warnings in /dev/shm/var/1/log/mysqld.2.err
      		 
      ok

      http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112

      connect.alter                            w3 [ fail ]  Found warnings/errors in server log file!
      		 
              Test ended at 2019-01-04 04:53:20
      		 
      line
      		 
      2019-01-04  4:53:19 0 [Warning] SSL error: Unable to get certificate
      		 
      2019-01-04  4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
      		 
      ^ Found warnings in /dev/shm/var/3/log/mysqld.1.err
      		 
      ok
      		 
      line
      		 
      2019-01-04  4:53:19 0 [Warning] SSL error: Unable to get certificate
      		 
      2019-01-04  4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
      		 
      ^ Found warnings in /dev/shm/var/3/log/mysqld.2.err
      		 
      ok

      Other tests failing the same way: connect.drop-open-error, connect.json, connect.part_file, connect.part_table, connect.secure_file_priv.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-18019 Default test certificate key too small, incompatible with OpenSSL 1.1.0

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            elenst Elena Stepanova created issue -
            elenst Elena Stepanova added a comment -

            It appears to be similar to MDEV-18019, but Otto is fixing it for Debian, while we are getting failures on RHEL.

            elenst Elena Stepanova added a comment - It appears to be similar to MDEV-18019 , but Otto is fixing it for Debian, while we are getting failures on RHEL.
            elenst Elena Stepanova made changes -
            Field Original Value New Value
            Description http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112

            {noformat}
            binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ fail ] Found warnings/errors in server log file!
                    Test ended at 2019-01-04 04:53:42
            line
            2019-01-04 4:53:38 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/1/log/mysqld.1.err
            ok
            line
            2019-01-04 4:53:38 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/1/log/mysqld.2.err
            ok
            {noformat}             		http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112
            {noformat}
            binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ fail ] Found warnings/errors in server log file!
                    Test ended at 2019-01-04 04:53:42
            line
            2019-01-04 4:53:38 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/1/log/mysqld.1.err
            ok
            line
            2019-01-04 4:53:38 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/1/log/mysqld.2.err
            ok
            {noformat}

            http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112
            {noformat}
            connect.alter w3 [ fail ] Found warnings/errors in server log file!
                    Test ended at 2019-01-04 04:53:20
            line
            2019-01-04 4:53:19 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/3/log/mysqld.1.err
            ok
            line
            2019-01-04 4:53:19 0 [Warning] SSL error: Unable to get certificate
            2019-01-04 4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
            ^ Found warnings in /dev/shm/var/3/log/mysqld.2.err
            ok
            {noformat}

            Other tests failing the same way: connect.drop-open-error, connect.json, connect.part_file, connect.part_table, connect.secure_file_priv.
            elenst Elena Stepanova made changes -
            Summary binlog_encryption.encrypted_slave fails in buildbot with SSL error binlog_encryption.encrypted_slave and connect tests fail in buildbot with SSL error
            elenst Elena Stepanova made changes -
            elenst Elena Stepanova made changes -
            Summary binlog_encryption.encrypted_slave and connect tests fail in buildbot with SSL error binlog_encryption.encrypted_slave, main.pool_of_threads and connect tests fail in buildbot with SSL error
            serg Sergei Golubchik made changes -
            Fix Version/s 10.4 [ 22408 ]
            otto Otto Kekäläinen added a comment -

            I fixed the certificate in late 2018, which fixed the issue both for Debian and RPM and everything.

            I plan to merge in https://github.com/MariaDB/server/pull/1505 next week on 10.6 since there has not been a review in almost a year. I assume no review = nobody objects merging it. It has happened too many times that I fix something and file a PR and then somebody else fixes the same thing instead of just approving the existing PR...

            otto Otto Kekäläinen added a comment - I fixed the certificate in late 2018, which fixed the issue both for Debian and RPM and everything. I plan to merge in https://github.com/MariaDB/server/pull/1505 next week on 10.6 since there has not been a review in almost a year. I assume no review = nobody objects merging it. It has happened too many times that I fix something and file a PR and then somebody else fixes the same thing instead of just approving the existing PR...
            otto Otto Kekäläinen added a comment -

            Looking at http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3725/steps/mtr/logs/stdio for 10.6

            binlog_encryption.encrypted_slave 'cbc,innodb,mix' w3 [ pass ]   1459
            		 
            binlog_encryption.encrypted_slave 'ctr,innodb,mix' w3 [ pass ]   2073
            		 
            binlog_encryption.encrypted_slave 'cbc,innodb,row' w4 [ pass ]   1508
            		 
            main.pool_of_threads                     w3 [ pass ]  10316
            		 
            main.connect                             w2 [ pass ]  14443

            ..and http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3722/steps/mtr/logs/stdio for 10.3

            binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ pass ]   2010
            		 
            binlog_encryption.encrypted_slave 'cbc,innodb,stmt' w2 [ pass ]   2124
            		 
            main.pool_of_threads                     w3 [ pass ]  10383
            		 
            main.connect                             w1 [ pass ]  10303

            This could probably be closed.

            otto Otto Kekäläinen added a comment - Looking at http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3725/steps/mtr/logs/stdio for 10.6 binlog_encryption.encrypted_slave 'cbc,innodb,mix' w3 [ pass ] 1459 binlog_encryption.encrypted_slave 'ctr,innodb,mix' w3 [ pass ] 2073 binlog_encryption.encrypted_slave 'cbc,innodb,row' w4 [ pass ] 1508 main.pool_of_threads w3 [ pass ] 10316 main.connect w2 [ pass ] 14443 ..and http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3722/steps/mtr/logs/stdio for 10.3 binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ pass ] 2010 binlog_encryption.encrypted_slave 'cbc,innodb,stmt' w2 [ pass ] 2124 main.pool_of_threads w3 [ pass ] 10383 main.connect w1 [ pass ] 10303 This could probably be closed.
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 91489 ] MariaDB v4 [ 141078 ]
            julien.fritsch Julien Fritsch made changes -
            Fix Version/s 10.3 [ 22126 ]

            People

              serg Sergei Golubchik
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.