Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-95123

Investigate failing auto-tests (QSslSocket et. al with OpenSSL v3)

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Fixed
    • Icon: P2: Important P2: Important
    • None
    • 6.2, 6.5
    • Network: SSL
    • All
    • 8
    • Qt6_Foundation_Sprint 38, Qt6_Foundation_Sprint 39, Foundation Sprint 65

      With OpenSSL v3 as a TLS backend some auto-tests started failing:

      • tst_QSslSocket::protocolServerSide (error:0A00018E:SSL routines::ca md too weak - replacing the old cert fixes the problem)
      • tst_QSslSocket::serverCipherPreferences (error:0A000076:SSL routines::no suitable signature algorithm) - test seems to be crap and very OpenSSL version specific. e.g. I can make it work if selecting TLS_CHACHA20_POLY1305_SHA256 as the preferable ciphersuite ... others don't seem work though, have to remove/re-think the test) - experiencing unexpected crash in QUEMU/arm64.
      • tst_QSslSocket::setLocalCertificateChain (the problem with 'weak' MD)
      • tst_QSslSocket::setSocketDescriptor (same problem with old cert/MD)
      • tst_QSslSocket::allowedProtocolNegotiation (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::spontaneousWrite (old cert, MD)
      • tst_QSslSocket::verifyMode()  
      • tst_QSslSocket::setReadBufferSize (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::abortOnSslErrors (error:0A00018E:SSL routines::ca md too weak)
      • -tst_QSslSocket::waitForMinusOne (TBU)
      • tst_QSslSocket::dhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::dhServerCustomParams (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::ecdhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::verifyClientCertificate
      • tst_QSslSocket::ephemeralServerKey (old cert, MD)
      • tst_QSslSocket::oldErrorsOnSocketReuse
      • tst_QSslSocket::alertInvalidCertificate(MD)

      MD == "ca md too weak"

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            manordheim Mårten Nordheim
            tpochep Timur Pocheptsov
            Vladimir Minenko Vladimir Minenko
            Alex Blasche Alex Blasche
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes