<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi all,</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have not made any changes to NGINX. Vanilla NGINX (./configure with no flags) passes all tests that run, but when compiling with SSL, not all SSL tests are passing. Is this expected, or do I need to configure nginx further aside from
adding the --with-http_ssl_module flag? Do each of the failing tests below require separate fixes, or is there a one-size-fits-all solution for all of them?</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">OS: MacOS 12.6.3<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">Chip: Apple M1 Max<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">NGINX: 1.24.0 built from source code with ./configure --with-debug --with-http_ssl_module<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">Nginx-tests:<span class="apple-converted-space"> </span><a href="https://github.com/nginx/nginx-tests/tree/4c2ad8093952706f327d04887c5546bad91b75a6" title="https://github.com/nginx/nginx-tests/tree/4c2ad8093952706f327d04887c5546bad91b75a6"><span style="color:#0086F0">https://github.com/nginx/nginx-tests/tree/4c2ad8093952706f327d04887c5546bad91b75a6</span></a><o:p></o:p></span></p>
<p class="MsoNormal">OpenSSL: 3.2.0 (/opt/homebrew/bin/openssl)</p>
<p class="MsoNormal">Perl: 5.30.3 (/usr/bin/perl)</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I run</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl.t</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I see</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">not ok 2 - session reused</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># Failed test 'session reused'</p>
<p class="MsoNormal"># at ssl.t line 187.</p>
<p class="MsoNormal"># 'HTTP/1.1 200 OK</p>
<p class="MsoNormal"># Server: nginx/1.24.0</p>
<p class="MsoNormal"># Date: Thu, 25 Jan 2024 18:50:10 GMT</p>
<p class="MsoNormal"># Content-Type: text/plain</p>
<p class="MsoNormal"># Content-Length: 6</p>
<p class="MsoNormal"># Connection: close</p>
<p class="MsoNormal">#</p>
<p class="MsoNormal"># body .'</p>
<p class="MsoNormal"># doesn't match '(?^m:^body r$)'</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I run</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_certificate.t</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I see</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">not ok 9 - session id context match</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># Failed test 'session id context match'</p>
<p class="MsoNormal"># at ssl_certificate.t line 183.</p>
<p class="MsoNormal"># 'HTTP/1.1 200 OK</p>
<p class="MsoNormal"># Server: nginx/1.24.0</p>
<p class="MsoNormal"># Date: Thu, 25 Jan 2024 18:52:11 GMT</p>
<p class="MsoNormal"># Content-Type: text/html</p>
<p class="MsoNormal"># Content-Length: 0</p>
<p class="MsoNormal"># Last-Modified: Thu, 25 Jan 2024 18:52:11 GMT</p>
<p class="MsoNormal"># Connection: close</p>
<p class="MsoNormal"># ETag: "65b2addb-0"</p>
<p class="MsoNormal"># X-SSL: default:.</p>
<p class="MsoNormal"># X-SSL-Protocol: TLSv1.3</p>
<p class="MsoNormal"># Accept-Ranges: bytes</p>
<p class="MsoNormal">#</p>
<p class="MsoNormal"># '</p>
<p class="MsoNormal"># doesn't match '(?^:default:r)'</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">And finally running</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_crl.t</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Yields</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">```</p>
<p class="MsoNormal">not ok 1 - crl - no revoked certs</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># Failed test 'crl - no revoked certs'</p>
<p class="MsoNormal"># at ssl_crl.t line 157.</p>
<p class="MsoNormal"># 'HTTP/1.1 400 Bad Request</p>
<p class="MsoNormal"># Server: nginx/1.24.0</p>
<p class="MsoNormal"># Date: Thu, 25 Jan 2024 18:53:50 GMT</p>
<p class="MsoNormal"># Content-Type: text/html</p>
<p class="MsoNormal"># Content-Length: 215</p>
<p class="MsoNormal"># Connection: close</p>
<p class="MsoNormal"># X-Verify: FAILED:unsupported certificate purpose</p>
<p class="MsoNormal">#</p>
<p class="MsoNormal"># <html></p>
<p class="MsoNormal"># <head><title>400 The SSL certificate error</title></head></p>
<p class="MsoNormal"># <body></p>
<p class="MsoNormal"># <center><h1>400 Bad Request</h1></center></p>
<p class="MsoNormal"># <center>The SSL certificate error</center></p>
<p class="MsoNormal"># <hr><center>nginx/1.24.0</center></p>
<p class="MsoNormal"># </body></p>
<p class="MsoNormal"># </html></p>
<p class="MsoNormal"># '</p>
<p class="MsoNormal"># doesn't match '(?^:SUCCESS)'</p>
<p class="MsoNormal">```</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,</p>
<p class="MsoNormal">Austin</p>
</div>
<br><br>
<P align=center><FONT style="BACKGROUND-COLOR: #ffffff">This message has been scanned for malware by Forcepoint. </FONT><A href="http://www.forcepoint.com/"><FONT style="BACKGROUND-COLOR: #ffffff" color=#000000>www.forcepoint.com</FONT></A></P>
</body>
</html>