Project

General

Profile

Actions

action #130354

closed

[security][15-SP4][maintenance] test fails in links_https due to openssl failure

Added by pstivanin 11 months ago. Updated 11 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2023-06-05
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

Observation

Might be caused by https://smelt.suse.de/request/300416/, needs investigation.

openQA test in scenario sle-15-SP4-Server-DVD-Updates-aarch64-fips_ker_mode_tests_crypt_web@aarch64-virtio fails in
links_https

Test suite description

Testsuite maintained at https://gitlab.suse.de/qe-security/osd-sle15-security.

Reproducible

Fails since (at least) Build 20230602-1

Expected result

Last good: 20230601-1 (or more recent)

Further details

Always latest result in this scenario: latest

Actions #1

Updated by pstivanin 11 months ago

  • Status changed from New to In Progress
  • Assignee set to pstivanin
Actions #2

Updated by pstivanin 11 months ago

  • % Done changed from 0 to 20
Actions #3

Updated by pstivanin 11 months ago

  • % Done changed from 20 to 40

I was able to reproduce the issue also locally. It does NOT happen when FIPS is DISABLED. Only when FIPS is ENABLED.

susetest:~ # SUSEConnect -r 7ae305de6441c2ef
Registering system to SUSE Customer Center

Updating system details on https://scc.suse.com ...
SUSEConnect error: Put "https://scc.suse.com/connect/systems": tls: short read from Rand: 
RAND_bytes
openssl error(s):: [101 114 114 111 114 58 50 52 48 54 69 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 114 101 115 101 101 100 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 54 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 114 101 115 101 101 100 32 101 114 114 111 114 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 50 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 105 110 32 101 114 114 111 114 32 115 116 97 116 101 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 50 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 105 110 32 101 114 114 111 114 32 115 116 97 116 101 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
Actions #4

Updated by pstivanin 11 months ago

  • % Done changed from 40 to 70

If I remove the repository that provides S:M:29254:300416 and execute zypper dup --allow-vendor-change --allow-downgrade && reboot, which downgrade the openssl package as follow:

The following 3 packages are going to be downgraded:
  libopenssl1_1       1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1
  libopenssl1_1-hmac  1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1
  openssl-1_1         1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1

then everything works fine:

susetest:~ # SUSEConnect -r 7ae305de6441c2ef
Registering system to SUSE Customer Center

Updating system details on https://scc.suse.com ...

Activating SLES 15.4 aarch64 ...
-> Adding service to system ...

Activating sle-module-basesystem 15.4 aarch64 ...
-> Adding service to system ...
-> Installing release package ...

Activating sle-module-server-applications 15.4 aarch64 ...
-> Adding service to system ...
-> Installing release package ...

Successfully registered system
Actions #5

Updated by pstivanin 11 months ago

BTW, this happens only on aarch64.

Actions #6

Updated by pstivanin 11 months ago

  • % Done changed from 70 to 80
Actions #7

Updated by pstivanin 11 months ago

  • % Done changed from 80 to 100
Actions #8

Updated by pstivanin 11 months ago

  • Status changed from In Progress to Resolved

update is in the queue, tests are now green

Actions

Also available in: Atom PDF