From: William Lallemand Date: Wed, 20 Sep 2023 14:02:16 +0000 (+0200) Subject: REGTESTS: ssl: skip generate-certificates test w/ wolfSSL X-Git-Tag: v2.9-dev6~24 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=61b6a4da6c3ec47b5a7ab73796ca851a2c8449bd;p=thirdparty%2Fhaproxy.git REGTESTS: ssl: skip generate-certificates test w/ wolfSSL WolfSSL does not seem to work correctly with the generate-certificates features. This patch disables it temporarly. ssl-max-ver TLSv1.2 seems to be a problem in the reg-test and wolfSSL but without it it's not able to generate correctly the cert: *** h1 debug|00000004:clear-lst.accept(0007)=0028 from [127.0.0.1:35956] ALPN= *** h1 debug|00000004:clear-lst.clireq[0028:ffffffff]: GET / HTTP/1.1 *** h1 debug|00000004:clear-lst.clihdr[0028:ffffffff]: x-sni: unknown-sni.com *** h1 debug|00000004:clear-lst.clihdr[0028:ffffffff]: host: 127.0.0.1 *** h1 debug|fd[0x29] OpenSSL error[0x13d] : need the private key *** h1 debug|<134>Sep 20 15:42:58 haproxy[165743]: unix:1 [20/Sep/2023:15:42:58.042] ssl-lst/1: SSL handshake failure (need the private key) **** dT 1.072 *** h1 debug|fd[0x2a] OpenSSL error[0x13d] : need the private key *** h1 debug|<134>Sep 20 15:42:59 haproxy[165743]: unix:1 [20/Sep/2023:15:42:59.044] ssl-lst/1: SSL handshake failure (need the private key) **** dT 2.075 *** h1 debug|fd[0x29] OpenSSL error[0x13d] : need the private key *** h1 debug|<134>Sep 20 15:43:00 haproxy[165743]: unix:1 [20/Sep/2023:15:43:00.046] ssl-lst/1: SSL handshake failure (need the private key) **** dT 3.079 *** h1 debug|fd[0x29] OpenSSL error[0x13d] : need the private key *** h1 debug|<134>Sep 20 15:43:01 haproxy[165743]: unix:1 [20/Sep/2023:15:43:01.050] ssl-lst/1: SSL handshake failure (need the private key) **** dT 3.080 *** h1 debug|00000004:default_backend.clicls[0028:0023] *** h1 debug|00000004:default_backend.closed[0028:0023] *** h1 debug|<134>Sep 20 15:43:01 haproxy[165743]: 127.0.0.1:35956 [20/Sep/2023:15:42:58.042] clear-lst default_backend/s1 0/0/-1/-1/+3009 503 +217 - - SC-- 3/1/0/0/3 0/0 "GET / HTTP/1.1" 0/-/-/-/0 -/-/- **** c3 rxhdr|HTTP/1.1 503 Service Unavailable\r **** c3 rxhdr|content-length: 107\r **** c3 rxhdr|cache-control: no-cache\r **** c3 rxhdr|content-type: text/html\r **** c3 rxhdr|\r --- diff --git a/reg-tests/ssl/ssl_generate_certificate.vtc b/reg-tests/ssl/ssl_generate_certificate.vtc index 96549df54d..0f8fe2c000 100644 --- a/reg-tests/ssl/ssl_generate_certificate.vtc +++ b/reg-tests/ssl/ssl_generate_certificate.vtc @@ -15,7 +15,7 @@ # certificate. varnishtest "Test the 'generate-certificates' SSL option" -feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'" +feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL) && !ssllib_name_startswith(wolfSSL)'" feature cmd "command -v openssl && command -v grep" feature ignore_unknown_macro