[issue13218] test_ssl failures on Ubuntu 11.10
Barry A. Warsaw ba...@python.org added the comment: Still investigating, but FTR, this isn't technically an Ubuntu issue as much as it is a Debian issue (and thus inherited by Ubuntu). I can reproduce the failure in Python 3.3 on Debian Wheezy. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Antoine Pitrou pit...@free.fr added the comment: Barry, perhaps you could try to know what in Ubuntu's OpenSSL build can lead to such failures? -- nosy: +barry ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Nadeem Vawda nadeem.va...@gmail.com added the comment: none of the buildbots are having this problem. Actually, it turns out the Ubuntu ARM builder is hitting the same failures. First failure for each branch was on 14 October (the day after 11.10 came out): http://www.python.org/dev/buildbot/all/builders/ARM%20Ubuntu%203.x/builds/16 http://www.python.org/dev/buildbot/all/builders/ARM%20Ubuntu%203.2/builds/9 http://www.python.org/dev/buildbot/all/builders/ARM%20Ubuntu%202.7/builds/8 -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
New submission from Nadeem Vawda nadeem.va...@gmail.com: Since upgrading to Ubuntu 11.10, I've been getting the following failures in test_ssl: == FAIL: test_protocol_sslv3 (test.test_ssl.ThreadedTests) Connecting to an SSLv3 server with various client options -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/def/Lib/test/test_ssl.py, line 1415, in test_protocol_sslv3 try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv23, False) File /home/nadeem/code/src/cpython/def/Lib/test/test_ssl.py, line 1232, in try_protocol_combo ssl.get_protocol_name(server_protocol))) AssertionError: Client protocol SSLv23 succeeded with server protocol SSLv3! == FAIL: test_protocol_tlsv1 (test.test_ssl.ThreadedTests) Connecting to a TLSv1 server with various client options -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/def/Lib/test/test_ssl.py, line 1433, in test_protocol_tlsv1 try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv23, False) File /home/nadeem/code/src/cpython/def/Lib/test/test_ssl.py, line 1232, in try_protocol_combo ssl.get_protocol_name(server_protocol))) AssertionError: Client protocol SSLv23 succeeded with server protocol TLSv1! -- and this (presumably related) failure in test_nntplib: == ERROR: setUpClass (test.test_nntplib.NetworkedNNTP_SSLTests) -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/def/Lib/test/test_nntplib.py, line 291, in setUpClass cls.server = cls.NNTP_CLASS(cls.NNTP_HOST, timeout=TIMEOUT, usenetrc=False) File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 1052, in __init__ readermode=readermode, timeout=timeout) File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 344, in __init__ self.getcapabilities() File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 380, in getcapabilities resp, caps = self.capabilities() File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 546, in capabilities resp, lines = self._longcmdstring(CAPABILITIES) File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 513, in _longcmdstring resp, list = self._getlongresp(file) File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 464, in _getlongresp resp = self._getresp() File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 437, in _getresp resp = self._getline() File /home/nadeem/code/src/cpython/def/Lib/nntplib.py, line 425, in _getline if not line: raise EOFError EOFError 3.2 gives a different set of failures in test_ssl (with the same failure in test_nntplib): == ERROR: test_constructor (test.test_ssl.ContextTests) -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/3.2/Lib/test/test_ssl.py, line 82, in f return func(*args, **kwargs) File /home/nadeem/code/src/cpython/3.2/Lib/test/test_ssl.py, line 345, in test_constructor ctx = ssl.SSLContext(ssl.PROTOCOL_SSLv2) File /home/nadeem/code/src/cpython/3.2/Lib/ssl.py, line 168, in __new__ return _SSLContext.__new__(cls, protocol) ssl.SSLError: failed to allocate SSL context == ERROR: test_protocol (test.test_ssl.ContextTests) -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/3.2/Lib/test/test_ssl.py, line 82, in f return func(*args, **kwargs) File /home/nadeem/code/src/cpython/3.2/Lib/test/test_ssl.py, line 356, in test_protocol ctx = ssl.SSLContext(proto) File /home/nadeem/code/src/cpython/3.2/Lib/ssl.py, line 168, in __new__ return _SSLContext.__new__(cls, protocol) ssl.SSLError: failed to allocate SSL context == ERROR: test_session_stats (test.test_ssl.ContextTests) -- Traceback (most recent call last): File /home/nadeem/code/src/cpython/3.2/Lib/test/test_ssl.py, line 82, in f return func(*args,
[issue13218] test_ssl failures on Ubuntu 11.10
Antoine Pitrou pit...@free.fr added the comment: All the tests work fine with OpenSSL 1.0.0d under Mageia. Could you look into Ubuntu-specific patches to OpenSSL? They have known to add disruptive changes (we already have some Ubuntu-specific code in test_ssl). Also, how about the system Python? Does it show the same test failures? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Antoine Pitrou pit...@free.fr added the comment: Actually, I think you may just have to fix skip_if_broken_ubuntu_ssl() in test_ssl.py. Could you give it a try? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Nadeem Vawda nadeem.va...@gmail.com added the comment: Also, how about the system Python? Does it show the same test failures? Unfortunately, it seems that the system Python package doesn't install the test suite; if you try to run python -m test.regrtest, it complains that it can't find the test modules. Actually, I think you may just have to fix skip_if_broken_ubuntu_ssl() in test_ssl.py. Could you give it a try? I'll take a look over the weekend. -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
STINNER Victor victor.stin...@haypocalc.com added the comment: Attached patch updates skip_if_broken_ubuntu_ssl(): OpenSSL in Ubuntu is still broken :-( OpenSSL package version is 1.0.0e-2ubuntu4 but in Python, ssl.OPENSSL_VERSION_INFO is still (0, 9, 8, 15, 15) !? -- keywords: +patch nosy: +haypo Added file: http://bugs.python.org/file23462/test_ssl_broken_ubuntu.patch ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Changes by Giampaolo Rodola' g.rod...@gmail.com: -- nosy: -giampaolo.rodola ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Antoine Pitrou pit...@free.fr added the comment: Attached patch updates skip_if_broken_ubuntu_ssl(): OpenSSL in Ubuntu is still broken :-( OpenSSL package version is 1.0.0e-2ubuntu4 but in Python, ssl.OPENSSL_VERSION_INFO is still (0, 9, 8, 15, 15) !? Are you sure? Did you rebuild? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Nadeem Vawda nadeem.va...@gmail.com added the comment: I get (1, 0, 0, 5, 15) for ssl.OPENSSL_VERSION_INFO. A trivial modification of Victor's patch doesn't seem to fix the failures for me, though :/ -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Nadeem Vawda nadeem.va...@gmail.com added the comment:
Sorry, that wasn't very coherent. What I meant to say is that I tried this:
if ((ssl.OPENSSL_VERSION_INFO, platform.linux_distribution()) in
[((0, 9, 8, 15, 15), ('debian', 'squeeze/sid', '')),
((1, 0, 0, 5, 15), ('debian', 'wheezy/sid', ''))]):
raise unittest.SkipTest(Patched Ubuntu OpenSSL breaks behaviour)
on the default branch, and I'm still getting the same failures.
--
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue13218
___
___
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
STINNER Victor victor.stin...@haypocalc.com added the comment: ssl.OPENSSL_VERSION_INFO is still (0, 9, 8, 15, 15) After a recompilation, I get (1, 0, 0, 5, 15) and ssl doesn't has PROTOCOL_SSLv2. test_ssl is failing with: == FAIL: test_protocol_sslv3 (test.test_ssl.ThreadedTests) Connecting to an SSLv3 server with various client options -- Traceback (most recent call last): File /home/vstinner/prog/python/default/Lib/test/test_ssl.py, line 1415, in test_protocol_sslv3 try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv23, False) File /home/vstinner/prog/python/default/Lib/test/test_ssl.py, line 1232, in try_protocol_combo ssl.get_protocol_name(server_protocol))) AssertionError: Client protocol SSLv23 succeeded with server protocol SSLv3! == FAIL: test_protocol_tlsv1 (test.test_ssl.ThreadedTests) Connecting to a TLSv1 server with various client options -- Traceback (most recent call last): File /home/vstinner/prog/python/default/Lib/test/test_ssl.py, line 1433, in test_protocol_tlsv1 try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv23, False) File /home/vstinner/prog/python/default/Lib/test/test_ssl.py, line 1232, in try_protocol_combo ssl.get_protocol_name(server_protocol))) AssertionError: Client protocol SSLv23 succeeded with server protocol TLSv1! -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Antoine Pitrou pit...@free.fr added the comment: AssertionError: Client protocol SSLv23 succeeded with server protocol SSLv3! AssertionError: Client protocol SSLv23 succeeded with server protocol TLSv1! Hmm... I guess Ubuntu may have aliased SSLv23 to SSLv3. Can someone take a look at Ubuntu patches to OpenSSL? I also think we could relax these tests. After all, they're testing OpenSSL's functionality, not really our own code. Regardless, I really don't like the way Ubuntu change semantics of a *library* they're packaging... -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Nadeem Vawda nadeem.va...@gmail.com added the comment: Hmm... I guess Ubuntu may have aliased SSLv23 to SSLv3. Can someone take a look at Ubuntu patches to OpenSSL? I don't know enough about OpenSSL to make sense of the actual headers on my system without spending more time on it, but it seems like Debian have disabled SSLv2 altogether http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589706. Could this be the source of the problem? -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue13218] test_ssl failures on Ubuntu 11.10
Changes by Éric Araujo mer...@netwok.org: -- nosy: +eric.araujo ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue13218 ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
