Repository navigation
[2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a #80186
Description
| BPO | 36005 |
|---|---|
| Nosy | @gpshead, @vstinner, @stratakis |
| Superseder |
Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.
Show more details
GitHub fields:
assignee = None
closed_at = <Date 2019-02-15.17:45:37.578>
created_at = <Date 2019-02-15.16:29:43.154>
labels = ['type-security', 'tests']
title = '[2.7] test_ssl failures on ARMv7 Ubuntu 2.7 with OpenSSL 1.1.1a'
updated_at = <Date 2019-02-15.17:48:55.795>
user = 'https://github.com/vstinner'bugs.python.org fields:
activity = <Date 2019-02-15.17:48:55.795>
actor = 'gregory.p.smith'
assignee = 'none'
closed = True
closed_date = <Date 2019-02-15.17:45:37.578>
closer = 'gregory.p.smith'
components = ['Tests']
creation = <Date 2019-02-15.16:29:43.154>
creator = 'vstinner'
dependencies = []
files = []
hgrepos = []
issue_num = 36005
keywords = []
message_count = 4.0
messages = ['335619', '335621', '335627', '335628']
nosy_count = 3.0
nosy_names = ['gregory.p.smith', 'vstinner', 'cstratak']
pr_nums = []
priority = 'normal'
resolution = 'duplicate'
stage = 'resolved'
status = 'closed'
superseder = '35925'
type = 'security'
url = 'https://bugs.python.org/issue36005'
versions = ['Python 2.7']
Activity
vstinner commentedon Feb 15, 2019
Extract of pythoninfo:
ssl.HAS_SNI: True
ssl.OPENSSL_VERSION: OpenSSL 1.1.1a 20 Nov 2018
ssl.OPENSSL_VERSION_INFO: (1, 1, 1, 1, 15)
ssl.OP_ALL: -0x7fffffac
ssl.OP_NO_TLSv1_1: 0x10000000
https://buildbot.python.org/all/#/builders/92/builds/325
Many tests with TLS errors. A few examples:
ERROR: test_connect (test.test_ssl.NetworkedTests)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)
ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
Connecting to an SSLv23 server with various client options
----------------------------------------------------------------------
...
self._sslobj.do_handshake()
SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:727)
ERROR: test_networked_good_cert (test.test_httplib.HTTPSTest)
...
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)
ERROR: test_context_argument (test.test_urllibnet.urlopen_HttpsTests)
...
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)
--
There are other failures which may be unrelated:
ERROR: test_fileno (test.test_urllib2net.OtherNetworkTests)
...
HTTPError: HTTP Error 404: Not Found
This buildbot build contains 5 changes:
I bet that it's a regression caused by:
c49f63c
vstinner commentedon Feb 15, 2019
It seems like this worker was offline for 1 month: build 324 was 1 month ago, whereas build 325 was 3 hours ago.
gpshead commentedon Feb 15, 2019
The buildbot was only offline for a few days while I upgraded the OS. do not look at the _delta_ between builds in the buildbot to determine a failure across that change as it went from ubuntu 14.04 to debian buster.
2.7 doesn't change often.
gpshead commentedon Feb 15, 2019
i duped this to the existing issue that was filed after the OS upgrade under the assumption it is the same thing.