Skip to content

[2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a #80186

Closed
Closed
[2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a#80186
Labels
testsTests in the Lib/test dirtype-securityA security issue

Description

@vstinner
vstinner
opened on Feb 15, 2019
BPO 36005
Nosy @gpshead, @vstinner, @stratakis
Superseder
  • bpo-35925: test_httplib test_nntplib test_ssl fail on ARMv7 Debian buster bot (OpenSSL 1.1.1a)
    		•

    Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
closed_at = <Date 2019-02-15.17:45:37.578>
created_at = <Date 2019-02-15.16:29:43.154>
labels = ['type-security', 'tests']
title = '[2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a'
updated_at = <Date 2019-02-15.17:48:55.795>
user = 'https://github.com/vstinner'

    bugs.python.org fields:

    activity = <Date 2019-02-15.17:48:55.795>
actor = 'gregory.p.smith'
assignee = 'none'
closed = True
closed_date = <Date 2019-02-15.17:45:37.578>
closer = 'gregory.p.smith'
components = ['Tests']
creation = <Date 2019-02-15.16:29:43.154>
creator = 'vstinner'
dependencies = []
files = []
hgrepos = []
issue_num = 36005
keywords = []
message_count = 4.0
messages = ['335619', '335621', '335627', '335628']
nosy_count = 3.0
nosy_names = ['gregory.p.smith', 'vstinner', 'cstratak']
pr_nums = []
priority = 'normal'
resolution = 'duplicate'
stage = 'resolved'
status = 'closed'
superseder = '35925'
type = 'security'
url = 'https://bugs.python.org/issue36005'
versions = ['Python 2.7']

    Activity

    1. vstinner commented on Feb 15, 2019

      @vstinner
      vstinner
      on Feb 15, 2019
      MemberAuthor

      Extract of pythoninfo:

      ssl.HAS_SNI: True
      ssl.OPENSSL_VERSION: OpenSSL 1.1.1a 20 Nov 2018
      ssl.OPENSSL_VERSION_INFO: (1, 1, 1, 1, 15)
      ssl.OP_ALL: -0x7fffffac
      ssl.OP_NO_TLSv1_1: 0x10000000

      https://buildbot.python.org/all/#/builders/92/builds/325

      Many tests with TLS errors. A few examples:

      ERROR: test_connect (test.test_ssl.NetworkedTests)
      ...
      SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

      ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
      Connecting to an SSLv23 server with various client options
      ----------------------------------------------------------------------
      ...
      self._sslobj.do_handshake()
      SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:727)

      ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
      ...
      SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

      ERROR: test_context_argument (test.test_urllibnet.urlopen_HttpsTests)
      ...
      IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

      --

      There are other failures which may be unrelated:

      ERROR: test_fileno (test.test_urllib2net.OtherNetworkTests)
      ...
      HTTPError: HTTP Error 404: Not Found

      This buildbot build contains 5 changes:

      [2.7] bpo-33570: TLS 1.3 ciphers for OpenSSL 1.1.1 (GH-6976) (GH-8760) (GH-10607)(3 hours ago)
bpo-35746: Credit Colin Read and Nicolas Edet (GH-11866)(5 hours ago)
Doc sidebar: 3.6 has moved to security-fix mode. (GH-11810)(5 days ago)
[2.7] Fix url to core-mentorship mailing list (GH-11775). (GH-11778)(9 days ago)
bpo-25592: Improve documentation of distutils data_files (GH-9767) (GH-11734)(13 days ago)

      I bet that it's a regression caused by:

      c49f63c

    2. vstinner
      added
      testsTests in the Lib/test dir
      type-securityA security issue
      on Feb 15, 2019

    3. vstinner commented on Feb 15, 2019

      @vstinner
      vstinner
      on Feb 15, 2019
      MemberAuthor

      It seems like this worker was offline for 1 month: build 324 was 1 month ago, whereas build 325 was 3 hours ago.

    4. gpshead
      closed this as completedon Feb 15, 2019

    5. gpshead commented on Feb 15, 2019

      @gpshead
      gpshead
      on Feb 15, 2019
      Member

      The buildbot was only offline for a few days while I upgraded the OS. do not look at the _delta_ between builds in the buildbot to determine a failure across that change as it went from ubuntu 14.04 to debian buster.

      2.7 doesn't change often.

    6. gpshead commented on Feb 15, 2019

      @gpshead
      gpshead
      on Feb 15, 2019
      Member

      i duped this to the existing issue that was filed after the OS upgrade under the assumption it is the same thing.

    7. ezio-melotti
      transferred this issue fromon Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    No one assigned

      Labels

      testsTests in the Lib/test dirtype-securityA security issue

      Projects

      No projects

        Milestone

        No milestone

        Relationships

        None yet

        Development

        No branches or pull requests

        Issue actions