Uploaded image for project: 'Qt Quality Assurance Infrastructure'
  1. Qt Quality Assurance Infrastructure
  2. QTQAINFRA-2990

Renew SSL certificate on test server

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • P0: Blocker
    • None
    • None
    • Network Test Server
    • None
    • 1cde8d1097404dba0b1c074150859e5c56c4d50c (qtqa/sysadmin/master)

    Description

      The current certificate used by qt-test-server.qt-test-net (10.212.2.216 port 443) expires in July 2019. An expired certificate has the potential of breaking several network tests.

      ssl-cert: Subject: commonName=qt-test-server.qt-test-net/organizationName=Nokia/stateOrProvinceName=Oslo/countryName=NO
      Not valid before: 2009-07-10T07:41:23
      Not valid after:  2019-07-08T07:41:23
      

      Action plan:

      1. generate a new certificate
      2. deploy the new certificate in the source code in all branches, in addition to the old one
        • this will require modification of some tests to have a list of valid certificates
      3. wait for change to be successfully integrated
      4. deploy the new certificate on the test-server
        • if the build becomes red (maybe because of hidden tests needing the old server cert) we can in an instant roll-back the server to its old certificate (we can always fall-back to the old certificate until July 8th that it expires).

      The following 8 tests (in 5.12, and around 60 tests in 5.9) are directly related to the expired certificate:

      FAIL!  : tst_QSslSocket::setSslConfiguration(WithoutProxy:set-root-cert) 'socket->waitForDisconnected()' returned FALSE. (The certificate is self-signed, and untrusted)
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(1614)]
      FAIL!  : tst_QSslSocket::setSslConfiguration(WithoutProxy:secure) 'socket->waitForDisconnected()' returned FALSE. (The certificate is self-signed, and untrusted)
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(1614)]
      FAIL!  : tst_QSslSocket::verifyMode(WithoutProxy) Compared lists have different sizes.
         Actual   (socket.sslErrors()) size: 2
         Expected (expectedErrors) size: 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2313)]
      FAIL!  : tst_QSslSocket::resume(WithoutProxy:ignoreSpecificErrors-Right) Compared values are not the same
         Actual   (encryptedSpy.count()): 0
         Expected (1)                   : 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2843)]
      FAIL!  : tst_QSslSocket::resume(WithSocks5Proxy:ignoreSpecificErrors-Right) Compared values are not the same
         Actual   (encryptedSpy.count()): 0
         Expected (1)                   : 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2843)]
      FAIL!  : tst_QSslSocket::resume(WithSocks5ProxyAuth:ignoreSpecificErrors-Right) Compared values are not the same
         Actual   (encryptedSpy.count()): 0
         Expected (1)                   : 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2843)]
      FAIL!  : tst_QSslSocket::resume(WithHttpProxy:ignoreSpecificErrors-Right) Compared values are not the same
         Actual   (encryptedSpy.count()): 0
         Expected (1)                   : 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2843)]
      FAIL!  : tst_QSslSocket::resume(WithHttpProxyBasicAuth:ignoreSpecificErrors-Right) Compared values are not the same
         Actual   (encryptedSpy.count()): 0
         Expected (1)                   : 1
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(2843)]
      

      The following two also failed once in normal test runs (non-expired cert), so they might be a fluke:

      FAIL!  : tst_QSslSocket::connectToHostEncrypted(WithoutProxy) 'socket->waitForDisconnected()' returned FALSE. ()
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(736)]
      FAIL!  : tst_QSslSocket::connectToHostEncryptedWithVerificationPeerName(WithoutProxy) 'socket->waitForDisconnected()' returned FALSE. ()
         Loc: [../../../../../work/qt/qtbase/tests/auto/network/ssl/qsslsocket/tst_qsslsocket.cpp(770)]
      

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              jimis Dimitrios Apostolou
              vhilshei Volker Hilsheimer
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes