openssl: Test 80-test_cmp_http fails at alpha17 on NonStop x86/ia64 (round 2)

The original case was not correctly solved - not sure what was missed in the merge. Please see or reopen #15386.

make -j4 -s test TESTS="test_cmp_http"
80-test_cmp_http.t ..
Warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1903:CMP info: will contact http://127.0.0.1:80/pkix/
# CMP info: sending IR
# CMP error: connect timeout:
# CMP error: transfer error:request sent: IR, expected response: IP
../../../../util/wrap.pl ../../../../apps/openssl cmp -server '127.0.0.1:0' -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 => 255
    not ok 1 - default config
# ------------------------------------------------------------------------------
    #   Failed test 'default config'
    #   at test/recipes/80-test_cmp_http.t line 147.
Warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1903:CMP info: will contact http://example.com:80/pkix/
# CMP info: sending IR
# CMP error: received error:Code=404, Reason=Not Found
# CMP error: error receiving:server=http://example.com:80
# CMP error: transfer error:request sent: IR, expected response: IP
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server 'example.com:0' -msg_timeout 1 => 255
    not ok 2 - wrong server
# ------------------------------------------------------------------------------
    #   Failed test 'wrong server'
    #   at test/recipes/80-test_cmp_http.t line 147.
Warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1903:CMP info: will contact http://127.0.0.1:99/pkix/
# CMP info: sending IR
# CMP error: connect timeout:
# CMP error: transfer error:request sent: IR, expected response: IP
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server '127.0.0.1:99' -msg_timeout 1 => 255
    not ok 3 - wrong server port
# ------------------------------------------------------------------------------
    #   Failed test 'wrong server port'
    #   at test/recipes/80-test_cmp_http.t line 147.
Warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1903:CMP info: will contact http://127.0.0.1:80/pkix/
# CMP info: sending IR
# CMP error: connect timeout:
# CMP error: transfer error:request sent: IR, expected response: IP
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server 127.0.0.1 -msg_timeout 1 => 255
    not ok 4 - server default port
# ------------------------------------------------------------------------------
    #   Failed test 'server default port'
    #   at test/recipes/80-test_cmp_http.t line 147.
setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1783:CMP error: cannot parse -server URL: 127.0.0.1:65536
cmp_main:/home/git/openssl-3.0/apps/cmp.c:2786:CMP error: cannot set up CMP context
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# CMP error: invalid port number:65536
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server '127.0.0.1:65536' => 255
    not ok 5 - server port out of range
# ------------------------------------------------------------------------------
    #   Failed test 'server port out of range'
    #   at test/recipes/80-test_cmp_http.t line 147.
setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1783:CMP error: cannot parse -server URL: 127.0.0.1:-10
cmp_main:/home/git/openssl-3.0/apps/cmp.c:2786:CMP error: cannot set up CMP context
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
# CMP error: invalid port number:-10
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server '127.0.0.1:-10' => 255
    not ok 6 - server port negative
# ------------------------------------------------------------------------------
    #   Failed test 'server port negative'
    #   at test/recipes/80-test_cmp_http.t line 147.
cmp: Option -server needs a value
cmp: Use -help for summary.
# cmp_main:/home/git/openssl-3.0/apps/cmp.c:2680:CMP info: using section(s) 'Mock connection' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:/home/git/openssl-3.0/apps/cmp.c:2203:CMP warning: -proxy option argument is empty string, resetting option
../../../../util/wrap.pl ../../../../apps/openssl cmp -config ../Mock/test.cnf -section 'Mock connection' -certout ../../../../test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -server => 255
    not ok 7 - server missing argument
# ------------------------------------------------------------------------------Makefile:3230: recipe for target 'run_tests' failed
make[1]: *** [run_tests] Interrupt
Makefile:3227: recipe for target 'tests' failed
make: *** [tests] Interrupt

About this issue

Original URL
State: closed
Created 3 years ago
Comments: 28 (28 by maintainers)

Commits related to this issue

test/recipes/80-test_cmp_http.t: Simplify test_cmp_http() test_cmp_http() made some assumptions about what values that exit_checker could get that aren't quite right. Furthermore, the expected resul... — committed to levitte/openssl by levitte 3 years ago
test/recipes/80-test_cmp_http.t: Don't trust $server_port in start_mock_server() Even if $server_port isn't touched, it's still a number coming from configuration. It's therefore not trustable as an... — committed to levitte/openssl by levitte 3 years ago
test/recipes/80-test_cmp_http.t: Don't trust $server_port in start_mock_server() Even if $server_port isn't touched, it's still a number coming from configuration. It's therefore not trustable as an... — committed to openssl/openssl by levitte 3 years ago
test/recipes/80-test_cmp_http.t: Simplify test_cmp_http() test_cmp_http() made some assumptions about what values that exit_checker could get that aren't quite right. Furthermore, the expected resul... — committed to devnexen/openssl by levitte 3 years ago
test/recipes/80-test_cmp_http.t: Don't trust $server_port in start_mock_server() Even if $server_port isn't touched, it's still a number coming from configuration. It's therefore not trustable as an... — committed to devnexen/openssl by levitte 3 years ago

Most upvoted comments

As per #15580 (comment) we can consider this fixed by #15580 😃

Thank you @DDvO @levitte @slontis and others. This had me worried.

rsbeckerca on Jun 4, 2021

As per https://github.com/openssl/openssl/pull/15580#issuecomment-854914994 we can consider this fixed by #15580 😃

DDvO on Jun 4, 2021

I suspect the issue is with the platform makedepend rather than anything OpenSSL is doing

I see (though I don’t know makedepend). How does this surface - what goes wrong if you simply call make again to re-build?

Honestly, can we stick to the case? I can open an issue separately on the reconfigure, if it becomes an issue - we mostly do clean builds.

The acpt_state() seems fine from the cmp test. When running with -port 0, it also works:

$ apps/openssl cmp -config "" -srv_ref xyz -srv_secret pass: -rsp_cert test/certs/ee-cert.pem -port 0
setup_srv_ctx:/home/git/openssl-3.0/apps/cmp.c:1031:CMP warning: server will not be able to handle signature-protected requests since -srv_trusted is not given
ACCEPT 0.0.0.0:15119

rsbeckerca on Jun 2, 2021

Hmm, the first of the test cases should succeed but it does not:

# setup_client_ctx:/home/git/openssl-3.0/apps/cmp.c:1903:CMP info: will contact http://127.0.0.1:80/pkix/
# CMP info: sending IR
# CMP error: connect timeout:

and this certainly not an issue with 80_test_cmp.t.

This is likely due to an issue with the BIO IP layer or the NonStop OS.

DDvO on Jun 2, 2021