Project

General

Profile

Actions

action #156898

closed

[security] test fails in openvpn_server

Added by emiler about 2 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2024-03-08
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

openQA test in scenario sle-12-SP5-Server-DVD-Updates-x86_64-qam-openvpn-server@64bit fails in
openvpn_server

# openvpn --genkey secret static.key; echo _n_Ux-$?-
Options error: You must define shared secret output file (--secret)

Related issues 1 (0 open1 closed)

Related to openQA Tests - action #157420: [security] Replace sed with native Perl for config file modificationRejectedemiler2024-03-18

Actions
Actions #1

Updated by emiler about 2 months ago

Gets fixed by running openvpn --genkey secret --secret static.key, so adding --secret to options.

Actions #2

Updated by emiler about 2 months ago · Edited

Applying this fix results in a different failure when starting openvpn service: https://openqa.suse.de/tests/13743625#step/openvpn_server/38

Mar 08 06:26:15.730613 server systemd[1]: Starting OpenVPN tunneling daemon instance using /etc/openvpn/static.conf...
Mar 08 06:26:15.734586 server openvpn[3223]: Options error: Unrecognized option or missing parameter(s) in static.conf:8: data-ciphers (2.3.8)                                                              
Mar 08 06:26:15.734750 server openvpn[3223]: Use --help for more information.  
Mar 08 06:26:15.735092 server systemd[1]: openvpn@static.service: Control process exited, code=exited status=1
Mar 08 06:26:15.735262 server systemd[1]: Failed to start OpenVPN tunneling daemon instance using /etc/openvpn/static.conf.
Mar 08 06:26:15.735282 server systemd[1]: openvpn@static.service: Unit entered failed state.
Mar 08 06:26:15.735285 server systemd[1]: openvpn@static.service: Failed with result 'exit-code'.
Actions #3

Updated by pstivanin about 2 months ago

the correct syntax is assert_script_run('openvpn --genkey --secret static.key');

Actions #4

Updated by emiler about 2 months ago · Edited

  • % Done changed from 0 to 100

https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/18853
I've create a separate configuration files for older systems.

Actions #5

Updated by emiler about 2 months ago

  • Status changed from New to Resolved

Merged, closing.

Actions #7

Updated by emiler about 2 months ago

  • Related to action #157420: [security] Replace sed with native Perl for config file modification added
Actions

Also available in: Atom PDF