Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-95123

Investigate failing auto-tests (QSslSocket et. al with OpenSSL v3)

    XMLWordPrintable

Details

    • Task
    • Resolution: Fixed
    • P2: Important
    • None
    • 6.2, 6.5
    • Network: SSL
    • All
    • 8
    • Qt6_Foundation_Sprint 38, Qt6_Foundation_Sprint 39, Foundation Sprint 65

    Description

      With OpenSSL v3 as a TLS backend some auto-tests started failing:

      • tst_QSslSocket::protocolServerSide (error:0A00018E:SSL routines::ca md too weak - replacing the old cert fixes the problem)
      • tst_QSslSocket::serverCipherPreferences (error:0A000076:SSL routines::no suitable signature algorithm) - test seems to be crap and very OpenSSL version specific. e.g. I can make it work if selecting TLS_CHACHA20_POLY1305_SHA256 as the preferable ciphersuite ... others don't seem work though, have to remove/re-think the test) - experiencing unexpected crash in QUEMU/arm64.
      • tst_QSslSocket::setLocalCertificateChain (the problem with 'weak' MD)
      • tst_QSslSocket::setSocketDescriptor (same problem with old cert/MD)
      • tst_QSslSocket::allowedProtocolNegotiation (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::spontaneousWrite (old cert, MD)
      • tst_QSslSocket::verifyMode()  
      • tst_QSslSocket::setReadBufferSize (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::abortOnSslErrors (error:0A00018E:SSL routines::ca md too weak)
      • -tst_QSslSocket::waitForMinusOne (TBU)
      • tst_QSslSocket::dhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::dhServerCustomParams (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::ecdhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::verifyClientCertificate
      • tst_QSslSocket::ephemeralServerKey (old cert, MD)
      • tst_QSslSocket::oldErrorsOnSocketReuse
      • tst_QSslSocket::alertInvalidCertificate(MD)

      MD == "ca md too weak"

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              manordheim Mårten Nordheim
              tpochep Timur Pocheptsov
              Vladimir Minenko Vladimir Minenko
              Alex Blasche Alex Blasche
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes