Actions
action #130354
closed[security][15-SP4][maintenance] test fails in links_https due to openssl failure
Added by pstivanin 11 months ago. Updated 11 months ago.
Start date:
2023-06-05
Due date:
% Done:
100%
Estimated time:
Difficulty:
Description
Observation¶
Might be caused by https://smelt.suse.de/request/300416/, needs investigation.
openQA test in scenario sle-15-SP4-Server-DVD-Updates-aarch64-fips_ker_mode_tests_crypt_web@aarch64-virtio fails in
links_https
Test suite description¶
Testsuite maintained at https://gitlab.suse.de/qe-security/osd-sle15-security.
Reproducible¶
Fails since (at least) Build 20230602-1
Expected result¶
Last good: 20230601-1 (or more recent)
Further details¶
Always latest result in this scenario: latest
Updated by pstivanin 11 months ago
- % Done changed from 20 to 40
I was able to reproduce the issue also locally. It does NOT happen when FIPS is DISABLED. Only when FIPS is ENABLED.
susetest:~ # SUSEConnect -r 7ae305de6441c2ef
Registering system to SUSE Customer Center
Updating system details on https://scc.suse.com ...
SUSEConnect error: Put "https://scc.suse.com/connect/systems": tls: short read from Rand:
RAND_bytes
openssl error(s):: [101 114 114 111 114 58 50 52 48 54 69 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 114 101 115 101 101 100 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 54 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 114 101 115 101 101 100 32 101 114 114 111 114 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 50 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 105 110 32 101 114 114 111 114 32 115 116 97 116 101 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 67 48 54 69 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 105 110 115 116 97 110 116 105 97 116 101 58 101 114 114 111 114 32 114 101 116 114 105 101 118 105 110 103 32 101 110 116 114 111 112 121 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
: [101 114 114 111 114 58 50 52 48 54 66 48 55 50 58 114 97 110 100 111 109 32 110 117 109 98 101 114 32 103 101 110 101 114 97 116 111 114 58 82 65 78 68 95 68 82 66 71 95 103 101 110 101 114 97 116 101 58 105 110 32 101 114 114 111 114 32 115 116 97 116 101 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
Updated by pstivanin 11 months ago
- % Done changed from 40 to 70
If I remove the repository that provides S:M:29254:300416 and execute zypper dup --allow-vendor-change --allow-downgrade && reboot, which downgrade the openssl package as follow:
The following 3 packages are going to be downgraded:
libopenssl1_1 1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1
libopenssl1_1-hmac 1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1
openssl-1_1 1.1.1l-150400.7.40.1 -> 1.1.1l-150400.7.37.1
then everything works fine:
susetest:~ # SUSEConnect -r 7ae305de6441c2ef
Registering system to SUSE Customer Center
Updating system details on https://scc.suse.com ...
Activating SLES 15.4 aarch64 ...
-> Adding service to system ...
Activating sle-module-basesystem 15.4 aarch64 ...
-> Adding service to system ...
-> Installing release package ...
Activating sle-module-server-applications 15.4 aarch64 ...
-> Adding service to system ...
-> Installing release package ...
Successfully registered system
Actions