-
-
Notifications
You must be signed in to change notification settings - Fork 102
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Dependencies for ssl-tests testsuite #3059
Comments
Any progress? |
CC @sxa for triage prioritisation, might be needed for July PSU? |
Beginning work on this, I believe.. make, open-ssl, curl, gcc & pkg-config are already present, currently working on adding gnutls-bin and the lib-nss packages for our supported dists, will verify the ones I expect to be present are. |
Playbooks updated and tested on Alpine 3.17, Centos 7, Debian 8. All fine except for missing tstclnt utility to run the ssl-tests-nss-client.sh test suite on Alpine, this suite will need excluding on Alpine. Continuing to work through other dists & platforms. |
@steelhead31 Can you add an example of running a test to validate the new prereqs into https://github.com/adoptium/infrastructure/blob/master/FAQ.md#how-do-i-replicate-a-test-failure and perhaps also add one into the VPC tests too so that we can verify that they don't break in the future before merging anything? |
Yup, no problem at all. |
Omitting FreeBSD as this is not a supported platform. |
I'm just making a few final checks and adjustments on my PR to install these pre-req packages for the SSL tests, there area couple of issues with the tests when running on CentOS6.. ./ssl-tests-openssl-client.sh tests run OK , but there are a couple of issues in the other two test suites ``` IGNORED: SunJSSE/DTLSv1.2: DTLSv1.0 + TLS_EMPTY_RENEGOTIATION_INFO_SCSV ``` And ``` ../ssl-tests/ssl-tests.mk:48: recipe for target 'ssl-tests-run' failed FAILED: SunJSSE/TLSv1.3: TLSv1.3 + TLS_AES_256_GCM_SHA384 stderr: tstclnt: read from socket failed: SSL_ERROR_PROTOCOL_VERSION_ALERT: Peer reports incompatible or unsupported protocol version. FAILED: SunJSSE/TLSv1.3: TLSv1.3 + TLS_AES_128_GCM_SHA256 stderr: tstclnt: read from socket failed: SSL_ERROR_PROTOCOL_VERSION_ALERT: Peer reports incompatible or unsupported protocol version. ``` |
Thanks for the info. I'll try to run ssl-tests on rhel-6 (we no longer do regular testing on rhel6/centos6). |
@steelhead31 Have you seen (or can you determine if we're seeing) the issues with the absence of rngd when running the tests on the Temurin builds instead of OpenJ9: eclipse-openj9/openj9#16720 |
I havent seen any examples of this, all of the test suites, with the exceptions of those platforms/tests mentioned have all worked correctly... I'll see if I can determine which platforms etc encounter the issue, and see if I can recreate on some of our test machines. |
@steelhead31 Thank you for doing this work. I'll proceed with addition ssl-tests. However, seems, it still needs to get deployed somehow. https://ci.adoptium.net/view/Test_grinder/job/Grinder/7851/console https://ci.adoptium.net/view/Test_grinder/job/Grinder/7856/console |
When it comes to problems on Centos6 ssl-tests-gnutls-client.sh ssl-tests-nss-client.sh |
Integration of new ssl-tests testsuite into aqa is in progress [1]. However some additional dependencies will be needed.
For linux these are (ubuntu package names):
make
openssl
curl
gnutls-bin
(needed by ssl-tests-gnutls-client.sh)libnss3
libnss3-tools
libnss3-dev
gcc
pkg-config
(needed by ssl-tests-nss-client.sh)For other systems (Windows and Mac, possibly others?):
make
openssl
curl
For more details, see [1].
[1] adoptium/aqa-tests#4403
The text was updated successfully, but these errors were encountered: