[MDEV-18135] binlog_encryption.encrypted_slave, main.pool_of_threads and connect tests fail in buildbot with SSL error Created: 2019-01-04  Updated: 2023-04-27

Status: Open
Project: MariaDB Server
Component/s: SSL, Tests
Affects Version/s: 10.3
Fix Version/s: 10.4

Type: Bug Priority: Major
Reporter: Elena Stepanova Assignee: Sergei Golubchik
Resolution: Unresolved Votes: 0
Labels: None

Issue Links:
Relates
relates to MDEV-18019 Default test certificate key too smal... Closed

 Description   

http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112

binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ fail ]  Found warnings/errors in server log file!
 
        Test ended at 2019-01-04 04:53:42
 
line
 
2019-01-04  4:53:38 0 [Warning] SSL error: Unable to get certificate
 
2019-01-04  4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
 
^ Found warnings in /dev/shm/var/1/log/mysqld.1.err
 
ok
 
line
 
2019-01-04  4:53:38 0 [Warning] SSL error: Unable to get certificate
 
2019-01-04  4:53:38 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
 
^ Found warnings in /dev/shm/var/1/log/mysqld.2.err
 
ok

http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/112

connect.alter                            w3 [ fail ]  Found warnings/errors in server log file!
 
        Test ended at 2019-01-04 04:53:20
 
line
 
2019-01-04  4:53:19 0 [Warning] SSL error: Unable to get certificate
 
2019-01-04  4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
 
^ Found warnings in /dev/shm/var/3/log/mysqld.1.err
 
ok
 
line
 
2019-01-04  4:53:19 0 [Warning] SSL error: Unable to get certificate
 
2019-01-04  4:53:19 0 [Warning] SSL error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
 
^ Found warnings in /dev/shm/var/3/log/mysqld.2.err
 
ok

Other tests failing the same way: connect.drop-open-error, connect.json, connect.part_file, connect.part_table, connect.secure_file_priv.

 Comments   
Comment by Elena Stepanova [ 2019-01-04 ]

It appears to be similar to MDEV-18019, but Otto is fixing it for Debian, while we are getting failures on RHEL.

Comment by Otto Kekäläinen [ 2021-03-10 ]

I fixed the certificate in late 2018, which fixed the issue both for Debian and RPM and everything.

I plan to merge in https://github.com/MariaDB/server/pull/1505 next week on 10.6 since there has not been a review in almost a year. I assume no review = nobody objects merging it. It has happened too many times that I fix something and file a PR and then somebody else fixes the same thing instead of just approving the existing PR...

Comment by Otto Kekäläinen [ 2021-04-12 ]

Looking at http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3725/steps/mtr/logs/stdio for 10.6

binlog_encryption.encrypted_slave 'cbc,innodb,mix' w3 [ pass ]   1459
 
binlog_encryption.encrypted_slave 'ctr,innodb,mix' w3 [ pass ]   2073
 
binlog_encryption.encrypted_slave 'cbc,innodb,row' w4 [ pass ]   1508
 
main.pool_of_threads                     w3 [ pass ]  10316
 
main.connect                             w2 [ pass ]  14443

..and http://buildbot.askmonty.org/buildbot/builders/kvm-rpm-rhel8-amd64/builds/3722/steps/mtr/logs/stdio for 10.3

binlog_encryption.encrypted_slave 'cbc,innodb,mix' w1 [ pass ]   2010
 
binlog_encryption.encrypted_slave 'cbc,innodb,stmt' w2 [ pass ]   2124
 
main.pool_of_threads                     w3 [ pass ]  10383
 
main.connect                             w1 [ pass ]  10303

This could probably be closed.

Generated at Thu Feb 08 08:41:46 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.