Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8444

mysql-test - main.openssl_6975 is failing with fips=1

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 10.0.16, 10.0.20
    • Fix Version/s: 10.0
    • Component/s: SSL
    • Labels:

      Description

      dhcp72:/usr/share/mysql-test # ./mysql-test-run.pl main.openssl_6975 --force
      Logging: ./mysql-test-run.pl  main.openssl_6975 --force
      vardir: /usr/share/mysql-test/var
      Checking leftover processes...
      Removing old var directory...
      Creating var directory '/usr/share/mysql-test/var'...
      Checking supported features...
      MariaDB Version 10.0.20-MariaDB
       - SSL connections supported
      Collecting tests...
      Installing system database...
      
      ==============================================================================
      
      TEST                                      RESULT   TIME (ms) or COMMENT
      --------------------------------------------------------------------------
      
      worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019
      worker[1] mysql-test-run: WARNING: running this script as _root_ will cause some tests to be skipped
      main.openssl_6975 'tlsv10'               [ fail ]
              Test ended at 2015-07-08 08:59:23
      
      CURRENT_TEST: main.openssl_6975
      --- /usr/share/mysql-test/r/openssl_6975,tlsv10.result	2015-06-17 10:54:11.000000000 -0400
      +++ /usr/share/mysql-test/r/openssl_6975,tlsv10.reject	2015-07-08 08:59:23.372542505 -0400
      @@ -10,16 +10,14 @@
       ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
       ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
       SSLv3 ciphers: user is ok with any cipher
      -Variable_name	Value
      -Ssl_cipher	RC4-SHA
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       Variable_name	Value
       Ssl_cipher	DHE-RSA-AES256-SHA
       SSLv3 ciphers: user requires SSLv3 cipher RC4-SHA
      -Variable_name	Value
      -Ssl_cipher	RC4-SHA
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       ERROR 1045 (28000): Access denied for user 'ssl_sslv3'@'localhost' (using password: NO)
       SSLv3 ciphers: user requires TLSv1.2 cipher AES128-SHA256
      -ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
       drop user ssl_sslv3@localhost;
       drop user ssl_tls12@localhost;
      
      mysqltest: Result length mismatch
      
       - saving '/usr/share/mysql-test/var/log/main.openssl_6975-tlsv10/' to '/usr/share/mysql-test/var/log/main.openssl_6975-tlsv10/'
      main.openssl_6975 'tlsv12'               [ fail ]
              Test ended at 2015-07-08 08:59:25
      
      CURRENT_TEST: main.openssl_6975
      --- /usr/share/mysql-test/r/openssl_6975,tlsv12.result	2015-06-17 10:54:11.000000000 -0400
      +++ /usr/share/mysql-test/r/openssl_6975,tlsv12.reject	2015-07-08 08:59:24.944542505 -0400
      @@ -13,13 +13,13 @@
       Ssl_cipher	AES128-SHA256
       ERROR 1045 (28000): Access denied for user 'ssl_tls12'@'localhost' (using password: NO)
       SSLv3 ciphers: user is ok with any cipher
      -ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
       SSLv3 ciphers: user requires SSLv3 cipher RC4-SHA
      -ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
       SSLv3 ciphers: user requires TLSv1.2 cipher AES128-SHA256
      -ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
      +ERROR 2026 (HY000): SSL connection error: Failed to set ciphers to use
       ERROR 2026 (HY000): SSL connection error: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
       drop user ssl_sslv3@localhost;
       drop user ssl_tls12@localhost;
      
      mysqltest: Result length mismatch
      
       - saving '/usr/share/mysql-test/var/log/main.openssl_6975-tlsv12/' to '/usr/share/mysql-test/var/log/main.openssl_6975-tlsv12/'
      --------------------------------------------------------------------------
      The servers were restarted 1 times
      Spent 0.000 of 14 seconds executing testcases
      
      Completed: Failed 2/2 tests, 0.00% were successful.
      
      Failing test(s): main.openssl_6975
      
      The log files in var/log may give you some hint of what went wrong.
      
      If you want to report this error, please read first the documentation
      at http://dev.mysql.com/doc/mysql/en/mysql-test-suite.html
      
      mysql-test-run: *** ERROR: there were failing test cases
      dhcp72:/usr/share/mysql-test #
      

      mariadb-10.0.20-18.1.x86_64
      openssl-1.0.1i-25.1.x86_64

      found also on mariadb-10.0.16-15.1.x86_64

      https://bugzilla.suse.com/show_bug.cgi?id=937388

        Gliffy Diagrams

          Attachments

            Activity

            Hide
            nirbhay_c Nirbhay Choubey added a comment -

            Test passed on my system.

            
            $ cat /etc/issue
            Ubuntu 14.04.2 LTS \n \l
            
            $ perl mtr main.openssl_6975
            Logging: mtr  main.openssl_6975
            vardir: /home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var
            Checking leftover processes...
             - found old pid 9789 in 'mysqld.1.pid', killing it...
               process did not exist!
            Removing old var directory...
            Creating var directory '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/var'...
            Checking supported features...
            MariaDB Version 10.0.20-MariaDB-debug
             - SSL connections supported
             - binaries are debug compiled
            Collecting tests...
            Installing system database...
            
            ==============================================================================
            
            TEST                                      RESULT   TIME (ms) or COMMENT
            --------------------------------------------------------------------------
            
            worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019
            main.openssl_6975 'tlsv10'               [ pass ]    260
            main.openssl_6975 'tlsv12'               [ pass ]    290
            --------------------------------------------------------------------------
            The servers were restarted 1 times
            Spent 0.550 of 7 seconds executing testcases
            
            Completed: All 2 tests were successful.
            
            Show
            nirbhay_c Nirbhay Choubey added a comment - Test passed on my system. $ cat /etc/issue Ubuntu 14.04.2 LTS \n \l $ perl mtr main.openssl_6975 Logging: mtr main.openssl_6975 vardir: /home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/ var Checking leftover processes... - found old pid 9789 in 'mysqld.1.pid', killing it... process did not exist! Removing old var directory... Creating var directory '/home/nirbhay/project/git-repo/maria/10.0/install/mysql-test/ var '... Checking supported features... MariaDB Version 10.0.20-MariaDB-debug - SSL connections supported - binaries are debug compiled Collecting tests... Installing system database... ============================================================================== TEST RESULT TIME (ms) or COMMENT -------------------------------------------------------------------------- worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019 main.openssl_6975 'tlsv10' [ pass ] 260 main.openssl_6975 'tlsv12' [ pass ] 290 -------------------------------------------------------------------------- The servers were restarted 1 times Spent 0.550 of 7 seconds executing testcases Completed: All 2 tests were successful.
            Hide
            elenst Elena Stepanova added a comment -

            Nirbhay Choubey,

            Can you reproduce it on their binaries? Do you know how to obtain official SUSE binaries for 10.0?

            Show
            elenst Elena Stepanova added a comment - Nirbhay Choubey , Can you reproduce it on their binaries? Do you know how to obtain official SUSE binaries for 10.0?
            Hide
            nirbhay_c Nirbhay Choubey added a comment -

            Elena Stepanova I have requested for the binaries. An update is that it happens with fips=1.

            Show
            nirbhay_c Nirbhay Choubey added a comment - Elena Stepanova I have requested for the binaries. An update is that it happens with fips=1.
            Hide
            nirbhay_c Nirbhay Choubey added a comment -

            Couldn't reproduce with fips enabled.

            [nirbhay@localhost mysql-test]$ cat /etc/issue
            CentOS release 6.6 (Final)
            Kernel \r on an \m
            
            [nirbhay@localhost mysql-test]$ cat /proc/sys/crypto/fips_enabled 
            1
            [nirbhay@localhost mysql-test]$ perl mtr main.openssl_6975
            Logging: mtr  main.openssl_6975
            vardir: /home/nirbhay/project/git-repo/maria/bld/10.0.20/install/mysql-test/var
            Checking leftover processes...
            Removing old var directory...
            Creating var directory '/home/nirbhay/project/git-repo/maria/bld/10.0.20/install/mysql-test/var'...
            Checking supported features...
            MariaDB Version 10.0.20-MariaDB-debug
             - SSL connections supported
             - binaries are debug compiled
            Collecting tests...
            Installing system database...
            
            ==============================================================================
            
            TEST                                      RESULT   TIME (ms) or COMMENT
            --------------------------------------------------------------------------
            
            worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019
            main.openssl_6975 'tlsv10'               [ pass ]    333
            main.openssl_6975 'tlsv12'               [ pass ]    318
            --------------------------------------------------------------------------
            The servers were restarted 1 times
            Spent 0.651 of 6 seconds executing testcases
            
            Completed: All 2 tests were successful.
            
            Show
            nirbhay_c Nirbhay Choubey added a comment - Couldn't reproduce with fips enabled. [nirbhay@localhost mysql-test]$ cat /etc/issue CentOS release 6.6 (Final) Kernel \r on an \m [nirbhay@localhost mysql-test]$ cat /proc/sys/crypto/fips_enabled 1 [nirbhay@localhost mysql-test]$ perl mtr main.openssl_6975 Logging: mtr main.openssl_6975 vardir: /home/nirbhay/project/git-repo/maria/bld/10.0.20/install/mysql-test/ var Checking leftover processes... Removing old var directory... Creating var directory '/home/nirbhay/project/git-repo/maria/bld/10.0.20/install/mysql-test/ var '... Checking supported features... MariaDB Version 10.0.20-MariaDB-debug - SSL connections supported - binaries are debug compiled Collecting tests... Installing system database... ============================================================================== TEST RESULT TIME (ms) or COMMENT -------------------------------------------------------------------------- worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019 main.openssl_6975 'tlsv10' [ pass ] 333 main.openssl_6975 'tlsv12' [ pass ] 318 -------------------------------------------------------------------------- The servers were restarted 1 times Spent 0.651 of 6 seconds executing testcases Completed: All 2 tests were successful.
            Hide
            nirbhay_c Nirbhay Choubey added a comment -

            Packages have now been shared by SUSE : https://bugzilla.suse.com/show_bug.cgi?id=937388

            Show
            nirbhay_c Nirbhay Choubey added a comment - Packages have now been shared by SUSE : https://bugzilla.suse.com/show_bug.cgi?id=937388

              People

              • Assignee:
                serg Sergei Golubchik
                Reporter:
                nirbhay_c Nirbhay Choubey
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated: