[
https://issues.apache.org/jira/browse/SERF-202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17726136#comment-17726136
]
Evgeny Kotkov commented on SERF-202:
------------------------------------
The current state is that both trunk and the 1.3.x branch support using serf
with OpenSSL 3. Currently, there are no known test failures related to the
changes in OpenSSL 3.
> SSL tests are not passing with openssl 3
> ----------------------------------------
>
> Key: SERF-202
> URL: https://issues.apache.org/jira/browse/SERF-202
> Project: serf
> Issue Type: Bug
> Affects Versions: serf-1.3.9
> Reporter: Tomáš Korbař
> Priority: Major
>
> Hi,
> It appears that libserf 1.3.9 is not able to work with openssl 3 library.
> When i run tests of libserf compiled with openssl 3 then i get following
> errors:
> Start 1: chunked-empty.response
> Start 2: chunked-trailers.response
> Start 3: chunked.response
> Start 4: deflate.response
> Start 5: simple.response
> Start 6: test_all
> 1/6 Test #1: chunked-empty.response ........... Passed 0.00 sec
> 2/6 Test #2: chunked-trailers.response ........ Passed 0.00 sec
> 3/6 Test #3: chunked.response ................. Passed 0.00 sec
> 4/6 Test #4: deflate.response ................. Passed 0.00 sec
> 5/6 Test #5: simple.response .................. Passed 0.00 sec
> 6/6 Test #6: test_all .........................***Failed 44.78 sec
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> C02984F7:error:0A00010B:SSL routines:ssl3_get_record:wrong version
> number:ssl/record/ssl3_record.c:354:
> ...........FF.FFFFFFFFFF.FFFFF....................................
> There were 17 failures:
> 1) test_ssl_handshake: /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456:
> expected <0> but was <120199>
> 2) test_ssl_trust_rootca:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 3) test_ssl_certificate_chain_with_anchor:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 4) test_ssl_certificate_chain_all_from_server:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 5) test_ssl_no_servercert_callback_allok:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 6) test_ssl_no_servercert_callback_fail:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:1560: expected <120170>
> but was <120199>
> 7) test_ssl_large_response:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 8) test_ssl_large_request:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 9) test_ssl_client_certificate:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 10) test_ssl_expired_server_cert:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 11) test_ssl_future_server_cert:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 12) test_setup_ssltunnel:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> 13) test_ssltunnel_basic_auth:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 14) test_ssltunnel_basic_auth_server_has_keepalive_off:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 15) test_ssltunnel_basic_auth_proxy_has_keepalive_off:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 16) test_ssltunnel_basic_auth_proxy_close_conn_on_200resp:
> /builddir/build/BUILD/serf-1.3.9/test/test_context.c:2138: expected <0> but
> was <120199>
> 17) test_ssltunnel_digest_auth:
> /builddir/build/BUILD/serf-1.3.9/test/test_util.c:456: expected <0> but was
> <120199>
> !!!FAILURES!!!
> Runs: 66 Passes: 49 Fails: 17
> 83% tests passed, 1 tests failed out of 6
> Total Test time (real) = 44.79 sec
> The following tests FAILED:
> 6 - test_all (Failed)
>
> I tried to find cause of this issue but unfortunately with no success. The
> tests are not able to perform ssl handshake as if the communication was not
> using tls at all. The certificates are not expired, i regenerated them and
> tested that the tests work with openssl 1.1.1.
> Thanks for any help you can provide.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
