On 12/13/2016 12:20 PM, Fraser Tweedale wrote:
Hi all,

The CI failures caused by one of my recent commits have me baffled.
It is exactly this commit[1] at which the problems begin.  I cannot
see anything in the commit to point a finger at.  In-tree tests run


In terms of symptoms: a Travis run has two jobs, one dealing with
`test_xmlrpc/test_[a-k]*.py' and the other dealing with
`test_xmlrpc/test_[l-z]*.py' as well as `test_install/',
`test_ipalib/', `test_ipapython/', `test_ipaserver/' and
`test_pkcs10'.  See [2] for an example of a failing build: the first
job (which includes tests for the ca plugin, which is what the patch
relates to) does succeed, but the second fails catastrophically with
myriad occurences of:

    E           NetworkError: cannot connect to
    (SSL_ERROR_NO_CIPHERS_SUPPORTED) No cipher suites are present
    and enabled in this program.

Leading to the unfortunate outcome:

    ======= 254 failed, 576 passed, 98 skipped, 1756 error in 254.59 seconds 

[2] https://travis-ci.org/freeipa/freeipa/builds/183544973

I have been unsuccessful in running `ipa-docker-test-runner' on my
own machine due to Java thread creation problems, so I need the help
of others to analyse and fix this issue.  If someone was able to
analyse a running container that had the test failures, send logs,
or even make an image of the container and upload it somewhere for
me, it might lead to some answers.

Thanks for your help.

(P.S. I hope it is not a trivial thing I have overlook ^_^)

Hi Fraser,

I am also playing around with this issue and have observed that when I run XMLRPC tests alone all is green, so the error must first occur in some other suite and then propagate to tests ran later. This also agrees with the observation that the half which does not run non-XMLRPC tests always passes.

I have observed that the first failure comes in test_ipaserver/test_serverroles suite at teardown with SEC_ERROR_LEGACY_DATABASE thrown from nss:

I will investigate further and keep you posted.\

Martin^3 Babinsky

Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to