[
https://issues.apache.org/jira/browse/SERF-202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17397742#comment-17397742
]
Justin Erenkrantz commented on SERF-202:
----------------------------------------
Thanks for the report. We know that there are a number of breaking changes for
OpenSSL 3.x+ - specifically around the test suites.
There have been some discussions on-list, but nothing concrete as 3.x was not
formally released then. I believe it is only still in release candidates now,
so we could revisit what has changed and what changes would need to be applied
to Serf to pass the test suites.
> SSL tests are not passing with openssl 3
> ----------------------------------------
>
> Key: SERF-202
> URL: https://issues.apache.org/jira/browse/SERF-202
> Project: serf
> Issue Type: Bug
> Affects Versions: serf-1.3.9
> Reporter: Tomáš Korbař
> Priority: Major
>
> Hi,
> It appears that libserf 1.3.9 is not able to work with openssl 3 library.
> When i run tests of libserf compiled with openssl 3 then i get following
> errors:
> Start 1: chunked-empty.response
> Start 2: chunked-trailers.response
> Start 3: chunked.response
> Start 4: deflate.response
> Start 5: simple.response
> Start 6: test_all
> 1/6 Test #1: chunked-empty.response ........... Passed 0.00 sec
> 2/6 Test #2: chunked-trailers.response ........ Passed 0.00 sec
> 3/6 Test #3: chunked.response ................. Passed 0.00 sec
> 4/6 Test #4: deflate.response ................. Passed 0.00 sec
> 5/6 Test #5: simple.response .................. Passed 0.00 sec
> 6/6 Test #6: test_all .........................***Failed 44.78 sec
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> ...........FF.FFFFFFFFFF.FFFFF....................................
> There were 17 failures:
> 1) test_ssl_handshake: /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456:
> expected <0> but was <120199>
> 2) test_ssl_trust_rootca:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 3) test_ssl_certificate_chain_with_anchor:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 4) test_ssl_certificate_chain_all_from_server:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 5) test_ssl_no_servercert_callback_allok:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 6) test_ssl_no_servercert_callback_fail:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:1560: expected <120170>
> but was <120199>
> 7) test_ssl_large_response:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 8) test_ssl_large_request:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 9) test_ssl_client_certificate:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 10) test_ssl_expired_server_cert:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 11) test_ssl_future_server_cert:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 12) test_setup_ssltunnel:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 13) test_ssltunnel_basic_auth:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 14) test_ssltunnel_basic_auth_server_has_keepalive_off:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 15) test_ssltunnel_basic_auth_proxy_has_keepalive_off:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 16) test_ssltunnel_basic_auth_proxy_close_conn_on_200resp:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 17) test_ssltunnel_digest_auth:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> !!!FAILURES!!!
> Runs: 66 Passes: 49 Fails: 17
> 83% tests passed, 1 tests failed out of 6
> Total Test time (real) = 44.79 sec
> The following tests FAILED:
> 6 - test_all (Failed)
>
> I tried to find cause of this issue but unfortunately with no success. The
> tests are not able to perform ssl handshake as if the communication was not
> using tls at all. The certificates are not expired, i regenerated them and
> tested that the tests work with openssl 1.1.1.
> Thanks for any help you can provide.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
