[Bug 2264610] New: FTBFS: sssd intermediate CA tests fail with OpenSSL 3.2
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2264610
Bug ID: 2264610
Summary: FTBFS: sssd intermediate CA tests fail with OpenSSL
3.2
Product: Fedora
Version: rawhide
OS: Linux
Status: NEW
Component: sssd
Severity: medium
Assignee: sssd-maintainers(a)lists.fedoraproject.org
Reporter: sgallagh(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: abokovoy(a)redhat.com, atikhono(a)redhat.com,
lslebodn(a)redhat.com, mzidek(a)redhat.com,
pbrezina(a)redhat.com, sbose(a)redhat.com,
ssorce(a)redhat.com,
sssd-maintainers(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
$ /usr/bin/make -C src/tests/test_CA/intermediate_CA ca_all
make: Entering directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA'
test -z "index.txt index.txt.attr index.txt.attr.old index.txt.old
SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem
SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile
SSSD_test_intermediate_CA_cert_x509_0001.pem
SSSD_test_intermediate_CA_cert_x509_0001.h
SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub
SSSD_test_intermediate_CA_cert_pubsshkey_0001.h
SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf " || rm -f
index.txt index.txt.attr index.txt.attr.old index.txt.old
SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem
SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile
SSSD_test_intermediate_CA_cert_x509_0001.pem
SSSD_test_intermediate_CA_cert_x509_0001.h
SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub
SSSD_test_intermediate_CA_cert_pubsshkey_0001.h
SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf
rm -rf .libs _libs
rm -rf newcerts
rm -rf softhsm*
rm -rf serial*
rm -f *.lo
/usr/bin/make -C ./.. SSSD_test_CA.pem
make[1]: Entering directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA'
/usr/bin/openssl req -batch -config ./SSSD_test_CA.config -x509 -new -nodes
-key SSSD_test_CA_key.pem -sha256 -days 1024 -set_serial 0 -extensions v3_ca
-out SSSD_test_CA.pem
make[1]: Leaving directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA'
ln -s ./../SSSD_test_CA.pem
/usr/bin/openssl req -batch -config ./SSSD_test_intermediate_CA.config -new
-nodes -key
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_key.pem
-sha256 -out SSSD_test_intermediate_CA_req.pem
cd .. && /usr/bin/openssl ca -config
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config
-batch -notext -keyfile
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA_key.pem
-in
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_req.pem
-days 200 -extensions v3_intermediate_ca -out
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA.pem
Using configuration from
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config
Check that the request matches the signature
Signature ok
ERROR:There is already a certificate for /O=SSSD/OU=SSSD test/CN=SSSD test
intermediate CA
The matching entry has the following details
Type :Valid
Expires on :240903175906Z
Serial Number :08
File name :unknown
Subject Name :/O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA
make: *** [Makefile:756: SSSD_test_intermediate_CA.pem] Error 1
make: Leaving directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA'
Reproducible: Always
Steps to Reproduce:
1.Build SSSD and run the intermediate CA tests
2.
3.
Actual Results:
$ /usr/bin/make -C src/tests/test_CA/intermediate_CA ca_all
make: Entering directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA'
test -z "index.txt index.txt.attr index.txt.attr.old index.txt.old
SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem
SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile
SSSD_test_intermediate_CA_cert_x509_0001.pem
SSSD_test_intermediate_CA_cert_x509_0001.h
SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub
SSSD_test_intermediate_CA_cert_pubsshkey_0001.h
SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf " || rm -f
index.txt index.txt.attr index.txt.attr.old index.txt.old
SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem
SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile
SSSD_test_intermediate_CA_cert_x509_0001.pem
SSSD_test_intermediate_CA_cert_x509_0001.h
SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub
SSSD_test_intermediate_CA_cert_pubsshkey_0001.h
SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf
rm -rf .libs _libs
rm -rf newcerts
rm -rf softhsm*
rm -rf serial*
rm -f *.lo
/usr/bin/make -C ./.. SSSD_test_CA.pem
make[1]: Entering directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA'
/usr/bin/openssl req -batch -config ./SSSD_test_CA.config -x509 -new -nodes
-key SSSD_test_CA_key.pem -sha256 -days 1024 -set_serial 0 -extensions v3_ca
-out SSSD_test_CA.pem
make[1]: Leaving directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA'
ln -s ./../SSSD_test_CA.pem
/usr/bin/openssl req -batch -config ./SSSD_test_intermediate_CA.config -new
-nodes -key
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_key.pem
-sha256 -out SSSD_test_intermediate_CA_req.pem
cd .. && /usr/bin/openssl ca -config
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config
-batch -notext -keyfile
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA_key.pem
-in
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_req.pem
-days 200 -extensions v3_intermediate_ca -out
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA.pem
Using configuration from
/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config
Check that the request matches the signature
Signature ok
ERROR:There is already a certificate for /O=SSSD/OU=SSSD test/CN=SSSD test
intermediate CA
The matching entry has the following details
Type :Valid
Expires on :240903175906Z
Serial Number :08
File name :unknown
Subject Name :/O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA
make: *** [Makefile:756: SSSD_test_intermediate_CA.pem] Error 1
make: Leaving directory
'/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA'
Expected Results:
Successful test run.
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2264610
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
3 weeks, 2 days