Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
10.4(EOL), 10.5
-
None
Description
The mentioned tests are now failing on the new Ubuntu Focal builders:
main.tls_version1 w1 [ fail ]
|
Test ended at 2020-03-17 13:43:25
|
|
|
CURRENT_TEST: main.tls_version1
|
ERROR 2026 (HY000): SSL connection error: tlsv1 alert internal error
|
mysqltest: At line 5: exec of '/usr/bin/mysql --defaults-file=/dev/shm/var/1/my.cnf --host=localhost --ssl -e "show status like 'ssl_version';"' failed, error: 256, status: 1, errno: 11
|
Output from before failure:
|
|
|
- saving '/dev/shm/var/1/log/main.tls_version1/' to '/dev/shm/var/log/main.tls_version1/'
|
|
|
Retrying test main.tls_version1, attempt(2/3)...
|
|
|
worker[1] > Restart - not started
|
main.tls_version1 w1 [ retry-fail ]
|
Test ended at 2020-03-17 13:43:25
|
|
|
CURRENT_TEST: main.tls_version1
|
ERROR 2026 (HY000): SSL connection error: tlsv1 alert internal error
|
mysqltest: At line 5: exec of '/usr/bin/mysql --defaults-file=/dev/shm/var/1/my.cnf --host=localhost --ssl -e "show status like 'ssl_version';"' failed, error: 256, status: 1, errno: 11
|
Output from before failure:
|
|
|
- skipping '/dev/shm/var/1/log/main.tls_version1/'
|
|
|
Test main.tls_version1 has failed 2 times, no more retries!
|
|
|
worker[1] > Restart - not started
|
main.tls_version w1 [ fail ]
|
Test ended at 2020-03-17 13:43:26
|
|
|
CURRENT_TEST: main.tls_version
|
ERROR 2026 (HY000): SSL connection error: no protocols available
|
mysqltest: At line 10: exec of '/usr/bin/mysql --defaults-file=/dev/shm/var/1/my.cnf --host=localhost --ssl --tls_version=TLSv1.1 -e "show status like 'ssl_version';"' failed, error: 256, status: 1, errno: 11
|
Output from before failure:
|
Variable_name Value
|
Ssl_version TLSv1.2
|
|
|
|
|
|
|
The result from queries just before the failure was:
|
Variable_name Value
|
Ssl_version TLSv1.2
|
Variable_name Value
|
Ssl_version TLSv1.2
|
|
|
- skipping '/dev/shm/var/1/log/main.tls_version/'
|
Example: http://buildbot.askmonty.org/buildbot/builders/kvm-deb-focal-amd64/builds/150/steps/mtr/logs/stdio
This is also reproducable on Launchpad builds, example: https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb-10.5/+build/18849686/+files/buildlog_ubuntu-focal-s390x.mariadb-10.5_1%3A10.5.2+maria~sid~ubuntu20.04.1~1584479139.d16ec42f3ea_BUILDING.txt.gz
It is however not failing on `kvm-deb-sid-amd64` even though they have the same libssl version. Maybe Ubuntu has some customization to drop TLS 1.0 and 1.1 as an extra override somewhere?
Notes to self:
- tests introduced in https://github.com/mariadb/server/commit/d13080133f6de9d89975b4c1f09615d47a10748d
- adjusted to be compatible with how RHEL introduced the policy to forbid TLS 1.0 and 1.1 in
MDEV-20170
