[MDEV-8404] Some main.ssl_xxx tests fails with --ssl Created: 2015-07-01  Updated: 2017-01-04  Resolved: 2017-01-04

Status: Closed
Project: MariaDB Server
Component/s: SSL, Tests
Affects Version/s: 10.0.20
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: Nirbhay Choubey (Inactive) Assignee: Sergei Golubchik
Resolution: Not a Bug Votes: 1
Labels: SUSE, upstream

Issue Links:
Duplicate
is duplicated by MDEV-7760 Some MTR tests fail when run with --s... Closed
Relates
relates to MDEV-8446 mysql-test: perfschema test failures ... Closed

 Description   

$ perl mtr --do-test=ssl --ssl --force | tee mtr.out
Logging: mtr  --do-test=ssl --ssl --force
MariaDB Version 10.0.20-MariaDB-debug
 - SSL connections supported
 - binaries are debug compiled
 
..snip..
 
TEST                                      RESULT   TIME (ms) or COMMENT
--------------------------------------------------------------------------
 
worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019
main.ssl-big                             [ skipped ]  Test needs --big-test
main.ssl_crl                             [ disabled ]  broken upstream
main.ssl_crl_clients_valid               [ disabled ]  broken upstream
main.ssl_crl_clrpath                     [ disabled ]  broken upstream
main.ssl_and_innodb 'innodb_plugin'      [ pass ]    137
main.ssl_and_innodb 'xtradb'             [ pass ]    206
main.ssl_7937 'nossl'                    [ fail ]
        Test ended at 2015-06-30 22:28:55
 
CURRENT_TEST: main.ssl_7937
mysqltest: Could not open connection 'default': 2026 SSL connection error: SSL is required, but the server does not support it
 
 - saving '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_7937-nossl/' to '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_7937-nossl/'
main.ssl_7937 'ssl'                      [ pass ]    111
main.ssl_8k_key                          [ fail ]
        Test ended at 2015-06-30 22:28:57
 
CURRENT_TEST: main.ssl_8k_key
mysqltest: Could not open connection 'default': 2026 SSL connection error: SSL certificate validation failure
 
 - saving '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_8k_key/' to '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_8k_key/'
main.ssl_cipher                          [ pass ]    129
main.ssl_crl_clients                     [ fail ]
        Test ended at 2015-06-30 22:28:59
 
CURRENT_TEST: main.ssl_crl_clients
mysqltest: Could not open connection 'default': 2026 SSL connection error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
 
 - saving '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_crl_clients/' to '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var/log/main.ssl_crl_clients/'
main.ssl                                 [ pass ]  12290
main.ssl_compress                        [ pass ]  11242
main.ssl_connect                         [ pass ]   1073
main.ssl_timeout                         [ pass ]   5031
sys_vars.ssl_ca_basic                    [ pass ]     11
sys_vars.ssl_capath_basic                [ pass ]      9
sys_vars.ssl_cert_basic                  [ pass ]     10
sys_vars.ssl_cipher_basic                [ pass ]     10
sys_vars.ssl_crl_basic                   [ pass ]      1
sys_vars.ssl_crlpath_basic               [ pass ]       
sys_vars.ssl_key_basic                   [ pass ]     25
mysql-test-run: *** ERROR: there were failing test cases
--------------------------------------------------------------------------
The servers were restarted 7 times
Spent 30.285 of 54 seconds executing testcases
 
Completed: Failed 3/18 tests, 83.33% were successful.
 
Failing test(s): main.ssl_7937 main.ssl_8k_key main.ssl_crl_clients

However, all ssl tests pass if no '--ssl' option is used.

https://bugzilla.suse.com/show_bug.cgi?id=920246



 Comments   
Comment by Elena Stepanova [ 2015-07-01 ]

Duplicate of MDEV-7760

Comment by Elena Stepanova [ 2015-07-01 ]

Actually, since this issue is linked to OpenSUSE bugzilla, lets make the other bug duplicate.

Comment by Elena Stepanova [ 2015-07-01 ]

The upstream bug is called "numerous tests fail on RedHat 6", but it's really about the --ssl option.

Comment by Sergei Golubchik [ 2016-06-15 ]

I tend to say that it's not a bug. There was no promise that the full test suite will work for any combination of mysqld command-line options. In particular, main.ssl_7937,nossl test specifically tests how the client fails to connect when the server does not support ssl. It rightfully fails if you force ssl in the client, but the server will have it disabled, this is precisely what the test is for. Other tests that fail use ssl with non-default certificates, so the client fails to connect with default ones.

Comment by Honza Horak [ 2017-01-04 ]

It doesn't make much sense to me – if a test is expected to fail in certain conditions (--ssl option), then the test should be skipped. Or is there any way to tell which tests are expected to fail with --ssl option?

Generated at Thu Feb 08 07:26:54 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.