Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-95123

Investigate failing auto-tests (QSslSocket et. al with OpenSSL v3)

    XMLWordPrintable

    Details

    • Type: Task
    • Status: In Progress
    • Priority: P2: Important
    • Resolution: Unresolved
    • Affects Version/s: 6.2
    • Fix Version/s: None
    • Component/s: Network: SSL
    • Labels:
    • Platform/s:
      All
    • Story Points:
      8
    • Sprint:
      Qt6_Foundation_Sprint 38, Qt6_Foundation_Sprint 39, Foundation PM Priority

      Description

      With OpenSSL v3 as a TLS backend some auto-tests started failing:

      • tst_QSslSocket::protocolServerSide (error:0A00018E:SSL routines::ca md too weak - replacing the old cert fixes the problem).
      • tst_QSslSocket::serverCipherPreferences (error:0A000076:SSL routines::no suitable signature algorithm) - test seems to be crap and very OpenSSL version specific. e.g. I can make it work if selecting TLS_CHACHA20_POLY1305_SHA256 as the preferable ciphersuite ... others don't seem work though, have to remove/re-think the test).
      • tst_QSslSocket::setLocalCertificateChain (the problem with 'weak' MD, same as in 'protoccolServerSide')
      • tst_QSslSocket::setSocketDescriptor (same problem with old cert/MD)
      • tst_QSslSocket::allowedProtocolNegotiation (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::spontaneousWrite (old cert, MD)
      • tst_QSslSocket::verifyMode() - TBU
      • tst_QSslSocket::setReadBufferSize (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::abortOnSslErrors (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::waitForMinusOne (TBU)
      • tst_QSslSocket::qtbug18498_peek2 (TBU)
      • tst_QSslSocket::dhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::dhServerCustomParams (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::ecdhServer (error:0A00018E:SSL routines::ca md too weak)
      • tst_QSslSocket::verifyClientCertificate (old cert, MD)
      • tst_QSslSocket::ephemeralServerKey (old cert, MD)
      • tst_QSslSocket::oldErrorsOnSocketReuse (MD problem)
      • tst_QSslSocket::alertInvalidCertificate(MD)

      MD == "ca md too weak"

        Attachments

          Issue Links

          For Gerrit Dashboard: QTBUG-95123
          # Subject Branch Project Status CR V

            Activity

              People

              Assignee:
              cnn Qt Core & Network
              Reporter:
              tpochep Timur Pocheptsov
              PM Owner:
              Vladimir Minenko Vladimir Minenko
              RnD Owner:
              Alex Blasche Alex Blasche
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:

                  Gerrit Reviews

                  There are no open Gerrit changes