From patchwork Sat Jul 6 14:21:21 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Vladislav Odintsov X-Patchwork-Id: 1957602 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=TMbfI6IA; dkim-atps=neutral Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=openvswitch.org (client-ip=140.211.166.133; helo=smtp2.osuosl.org; envelope-from=ovs-dev-bounces@openvswitch.org; receiver=patchwork.ozlabs.org) Received: from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4WGXd044w1z1xr9 for ; Sun, 7 Jul 2024 00:21:40 +1000 (AEST) Received: from localhost (localhost [127.0.0.1]) by smtp2.osuosl.org (Postfix) with ESMTP id 6B5CA40449; Sat, 6 Jul 2024 14:21:37 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp2.osuosl.org ([127.0.0.1]) by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id ToOaT3S3oiOx; Sat, 6 Jul 2024 14:21:35 +0000 (UTC) X-Comment: SPF check N/A for local connections - client-ip=2605:bc80:3010:104::8cd3:938; helo=lists.linuxfoundation.org; envelope-from=ovs-dev-bounces@openvswitch.org; receiver= DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 53CA4403EA Authentication-Results: smtp2.osuosl.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=TMbfI6IA Received: from lists.linuxfoundation.org (lf-lists.osuosl.org [IPv6:2605:bc80:3010:104::8cd3:938]) by smtp2.osuosl.org (Postfix) with ESMTPS id 53CA4403EA; Sat, 6 Jul 2024 14:21:35 +0000 (UTC) Received: from lf-lists.osuosl.org (localhost [127.0.0.1]) by lists.linuxfoundation.org (Postfix) with ESMTP id 022E7C0A97; Sat, 6 Jul 2024 14:21:35 +0000 (UTC) X-Original-To: dev@openvswitch.org Delivered-To: ovs-dev@lists.linuxfoundation.org Received: from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136]) by lists.linuxfoundation.org (Postfix) with ESMTP id 4C63EC0A96 for ; Sat, 6 Jul 2024 14:21:33 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp3.osuosl.org (Postfix) with ESMTP id 1CD3C60608 for ; Sat, 6 Jul 2024 14:21:33 +0000 (UTC) X-Virus-Scanned: amavis at osuosl.org Received: from smtp3.osuosl.org ([127.0.0.1]) by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP id R0Ox6PKQ9Dxc for ; Sat, 6 Jul 2024 14:21:32 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::234; helo=mail-lj1-x234.google.com; envelope-from=odivlad@gmail.com; receiver= DMARC-Filter: OpenDMARC Filter v1.4.2 smtp3.osuosl.org F3689605D9 Authentication-Results: smtp3.osuosl.org; dmarc=pass (p=none dis=none) header.from=gmail.com DKIM-Filter: OpenDKIM Filter v2.11.0 smtp3.osuosl.org F3689605D9 Authentication-Results: smtp3.osuosl.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20230601 header.b=TMbfI6IA Received: from mail-lj1-x234.google.com (mail-lj1-x234.google.com [IPv6:2a00:1450:4864:20::234]) by smtp3.osuosl.org (Postfix) with ESMTPS id F3689605D9 for ; Sat, 6 Jul 2024 14:21:31 +0000 (UTC) Received: by mail-lj1-x234.google.com with SMTP id 38308e7fff4ca-2ebe40673d8so31878921fa.3 for ; Sat, 06 Jul 2024 07:21:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1720275689; x=1720880489; darn=openvswitch.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=XZJgMazlH1uv4O9+BM++ZLB1iT5D/3HHkr/lqekGrtU=; b=TMbfI6IAWzhpkV7sqVcgUjd8No+6ldzXjHhTxvH6y98d52A5z2IspwHXPnQ+WVC96d 79u4ymiPLhHtP5Ueg/9NXRnPJheb+idtgd22ullzuDlXWSHLC/tkYqwK3e7chiidxOAi kSpEyFGe0sDQgB61eQ66BV6JNhv2B7Zp2tJyDF21YWT2CzXkj36hCHt6/o1so/blODHB gIyKw6TdnJP6HIL8EpnwXDn3TX0RGR8cfWXiuuHPuTE0pthFd1nz9XH3v08b0sOWrOzE kmx0WDxZXY0vnO1odRZygIaGLcdXzUpjVGtKDVoDxknl65DYwz++xB48eYoAjTcyy1fY jYiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1720275689; x=1720880489; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=XZJgMazlH1uv4O9+BM++ZLB1iT5D/3HHkr/lqekGrtU=; b=OFO60ZOeLVmv3/VKRVQW9GzXr7cDu5hni+v9stXw3Zdg07kOsjXLShni+24MZ46s8T Qr3QzF2FXWlA+Av2DCFNe4DSptEWtJ39Z759hDQ7TwlSKlL/bkfAl9Q3QmBB2ODST86K YVpi9GYNa7BMRIrQ0CWH9oID7Pdn2VRnfJs3tj0tJoJ3LQ/dpa5OxD7rmH4SOx5X7LuU 4BgT7dYQQlsxjkRNDdI0bf0OxMGRu3rENQGTBHET6r+LiS/f02ci88GL2rUCq7Pcf8KX J7kM0AkvxS/gzWc4eqlSocjIOV34E2CeghOIrtkxOfBhULL751yUNUakoySNbJqcH2CN DbZA== X-Gm-Message-State: AOJu0Yz7gYKN2wnxB4KeUsgaDkKJZbySyKP9x6GragCBeFtlKTt/5mu9 T8B7L3CL8kdaG1Vth76Cqy1b66yjjS3yPOdjnmEBwh9Pf9Ilh1nZroukhfL1 X-Google-Smtp-Source: AGHT+IHJQgWIYlUrrpy5pvsAgwtC+diYPwWkH87YWvP8EeIuQoii9SJ/eYmxXEkJ1IZTGKLDWNArHA== X-Received: by 2002:a05:6512:3456:b0:52e:9b92:49ad with SMTP id 2adb3069b0e04-52ea043f820mr4547128e87.0.1720275688288; Sat, 06 Jul 2024 07:21:28 -0700 (PDT) Received: from ip-10-70-112-12.vpc-1e810be1.internal (c2-185-102-122-48.elastic.cloud.croc.ru. [185.102.122.48]) by smtp.gmail.com with ESMTPSA id 2adb3069b0e04-52ea33808b8sm578428e87.120.2024.07.06.07.21.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 06 Jul 2024 07:21:27 -0700 (PDT) From: Vladislav Odintsov To: dev@openvswitch.org Cc: Vladislav Odintsov , vlodintsov@k2.cloud, Aliasgar Ginwala Date: Sat, 6 Jul 2024 17:21:21 +0300 Message-ID: <20240706142123.1179116-1-odivlad@gmail.com> X-Mailer: git-send-email 2.45.2 MIME-Version: 1.0 Subject: [ovs-dev] [PATCH ovn] tests: Fix ssl-ciphers RO sb test with old openssl. X-BeenThere: ovs-dev@openvswitch.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: ovs-dev-bounces@openvswitch.org Sender: "dev" The test "read-only sb db:pssl access with ssl-ciphers and ssl-protocols" fails when running with openssl which doesn't support some of passed values. For instance, on openssl 1.0.2 there is no support for 'SECLEVEL' and test fails due to extra string in stderr, which is asserted as a part of test: ./ovn.at:37851: ovn-sbctl --db=ssl:127.0.0.1:$TCP_PORT \ --private-key=$PKIDIR/testpki-test-privkey.pem \ --certificate=$PKIDIR/testpki-test-cert.pem \ --ca-cert=$PKIDIR/testpki-cacert.pem \ --ssl-ciphers='HIGH:!aNULL:!MD5:@SECLEVEL=1' \ --ssl-protocols='TLSv1,TLSv1.1,TLSv1.2' \ chassis-add ch vxlan 1.2.4.8 --- - 2024-07-05 13:48:11.697647047 +0300 +++ /builddir/build/BUILD/ovn-24.03.90/tests/testsuite.dir/at-groups/520/stderr 2024-07-05 13:48:11.694353357 +0300 @@ -1,2 +1,3 @@ +2024-07-05T10:48:11Z|00001|stream_ssl|ERR|SSL_CTX_set_cipher_list: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command ovn-sbctl: transaction error: {"details":"insert operation not allowed when database server is in read only mode","error":"not allowed"} This patch fixes the test adding grep of expected transaction error. CC: Aliasgar Ginwala Fixes: 620203f9f0d9 ("Fix segfault due to ssl-ciphers.") Signed-off-by: Vladislav Odintsov Acked-by: Ales Musil --- tests/ovn.at | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/ovn.at b/tests/ovn.at index 87a64499f..2341f52d5 100644 --- a/tests/ovn.at +++ b/tests/ovn.at @@ -37854,9 +37854,9 @@ AT_CHECK([ovn-sbctl --db=ssl:127.0.0.1:$TCP_PORT \ --ca-cert=$PKIDIR/testpki-cacert.pem \ --ssl-ciphers='HIGH:!aNULL:!MD5:@SECLEVEL=1' \ --ssl-protocols='TLSv1,TLSv1.1,TLSv1.2' \ - chassis-add ch vxlan 1.2.4.8], [1], [ignore], -[ovn-sbctl: transaction error: {"details":"insert operation not allowed when database server is in read only mode","error":"not allowed"} -]) + chassis-add ch vxlan 1.2.4.8 2>&1 | grep 'transaction error]', [0], [dnl +ovn-sbctl: transaction error: {"details":"insert operation not allowed when database server is in read only mode","error":"not allowed"} +], [ignore]) OVS_APP_EXIT_AND_WAIT([ovsdb-server]) AT_CLEANUP