nginx-tests: Some SSL tests are failing with openssl 3.2.0
Renato Botelho
garga at FreeBSD.org
Fri Jan 26 19:28:15 UTC 2024
Hello!
I'm building nginx on an environment with openssl 3.2.0 and some SSL
tests are failing. I suspect it's related to openssl version because it
works on another env with older openssl. But maybe I'm wrong.
Here are results
./access.t ................................. ok
./access_log.t ............................. ok
./access_log_variables.t ................... ok
./addition.t ............................... ok
./addition_buffered.t ...................... ok
./auth_basic.t ............................. ok
./auth_delay.t ............................. ok
./auth_request.t ........................... ok
./auth_request_satisfy.t ................... ok
./auth_request_set.t ....................... ok
./autoindex.t .............................. ok
./autoindex_format.t ....................... ok
./autoindex_win32.t ........................ skipped: Win32API::File not
installed
./binary_upgrade.t ......................... skipped: can leave orphaned
process group
./body.t ................................... ok
./body_chunked.t ........................... ok
./charset.t ................................ ok
./charset_gzip_static.t .................... ok
./config_dump.t ............................ ok
./dav.t .................................... ok
./dav_chunked.t ............................ ok
./dav_utf8.t ............................... ok
./debug_connection.t ....................... skipped: no --with-debug
available
./debug_connection_syslog.t ................ skipped: no --with-debug
available
./debug_connection_unix.t .................. skipped: no --with-debug
available
./empty_gif.t .............................. ok
./error_log.t .............................. ok
./fastcgi.t ................................ skipped: FCGI not installed
./fastcgi_body.t ........................... ok
./fastcgi_body2.t .......................... skipped: FCGI not installed
./fastcgi_buffering.t ...................... skipped: FCGI not installed
./fastcgi_cache.t .......................... skipped: FCGI not installed
./fastcgi_extra_data.t ..................... skipped: FCGI not installed
./fastcgi_header_params.t .................. skipped: FCGI not installed
./fastcgi_keepalive.t ...................... ok
./fastcgi_merge_params.t ................... skipped: FCGI not installed
./fastcgi_merge_params2.t .................. skipped: FCGI not installed
./fastcgi_request_buffering.t .............. skipped: FCGI not installed
./fastcgi_request_buffering_chunked.t ...... skipped: FCGI not installed
./fastcgi_split.t .......................... skipped: FCGI not installed
./fastcgi_unix.t ........................... skipped: FCGI not installed
./fastcgi_variables.t ...................... skipped: FCGI not installed
./geo.t .................................... ok
./geo_binary.t ............................. skipped: long configuration
parsing
./geo_ipv6.t ............................... ok
./geo_unix.t ............................... ok
./geoip.t .................................. skipped: no http_geoip
available
./grpc.t ................................... ok
./grpc_next_upstream.t ..................... ok
./grpc_pass.t .............................. ok
./grpc_request_buffering.t ................. ok
./grpc_ssl.t ............................... ok
./gunzip.t ................................. ok
./gunzip_memcached.t ....................... skipped: Cache::Memcached
not installed
./gunzip_perl.t ............................ skipped: no perl available
./gunzip_ssi.t ............................. ok
./gunzip_static.t .......................... ok
./gzip.t ................................... ok
./gzip_flush.t ............................. skipped: no perl available
./h2.t ..................................... ok
./h2_absolute_redirect.t ................... ok
./h2_auth_request.t ........................ ok
./h2_error_page.t .......................... ok
./h2_fastcgi_request_buffering.t ........... ok
./h2_headers.t ............................. ok
./h2_http2.t ............................... skipped: no http2
./h2_keepalive.t ........................... ok
./h2_limit_conn.t .......................... ok
./h2_limit_req.t ........................... ok
./h2_priority.t ............................ ok
./h2_proxy_cache.t ......................... ok
./h2_proxy_max_temp_file_size.t ............ ok
./h2_proxy_protocol.t ...................... ok
./h2_proxy_request_buffering.t ............. ok
./h2_proxy_request_buffering_redirect.t .... ok
./h2_proxy_request_buffering_ssl.t ......... ok
./h2_proxy_ssl.t ........................... ok
./h2_request_body.t ........................ ok
./h2_request_body_extra.t .................. ok
./h2_request_body_preread.t ................ ok
./h2_server_tokens.t ....................... ok
./h2_ssl.t ................................. ok
./h2_ssl_proxy_cache.t ..................... ok
./h2_ssl_proxy_protocol.t .................. ok
./h2_ssl_variables.t ....................... ok
./h2_ssl_verify_client.t ................... ok
./h2_trailers.t ............................ ok
./h2_variables.t ........................... ok
./h3_absolute_redirect.t ................... skipped: no http_v3 available
./h3_headers.t ............................. skipped: no http_v3 available
./h3_keepalive.t ........................... skipped: no http_v3 available
./h3_limit_conn.t .......................... skipped: no http_v3 available
./h3_limit_req.t ........................... skipped: no http_v3 available
./h3_proxy.t ............................... skipped: no http_v3 available
./h3_proxy_max_temp_file_size.t ............ skipped: no http_v3 available
./h3_reusable.t ............................ skipped: no http_v3 available
./h3_server_name.t ......................... skipped: no http_v3 available
./h3_server_tokens.t ....................... skipped: no http_v3 available
./h3_ssl_early_data.t ...................... skipped: no http_v3 available
./h3_ssl_reject_handshake.t ................ skipped: no http_v3 available
./h3_ssl_session_reuse.t ................... skipped: no http_v3 available
./h3_trailers.t ............................ skipped: no http_v3 available
./headers.t ................................ ok
./http_absolute_redirect.t ................. ok
./http_disable_symlinks.t .................. skipped: no external file found
./http_error_page.t ........................ ok
./http_expect_100_continue.t ............... ok
./http_header_buffers.t .................... ok
./http_headers_multi.t ..................... ok
./http_host.t .............................. ok
./http_include.t ........................... ok
./http_keepalive.t ......................... ok
./http_keepalive_shutdown.t ................ ok
./http_listen.t ............................ ok
./http_listen_wildcard.t ................... skipped: listen on wildcard
address
./http_location.t .......................... ok
./http_location_auto.t ..................... ok
./http_location_win32.t .................... skipped: not win32
./http_method.t ............................ ok
./http_resolver.t .......................... ok
./http_resolver_aaaa.t ..................... ok
./http_resolver_cleanup.t .................. ok
./http_resolver_cname.t .................... ok
./http_resolver_ipv4.t ..................... ok
./http_server_name.t ....................... ok
./http_try_files.t ......................... ok
./http_uri.t ............................... ok
./http_variables.t ......................... ok
./ignore_invalid_headers.t ................. ok
./image_filter.t ........................... skipped: GD not installed
./image_filter_finalize.t .................. skipped: no image_filter
available
./image_filter_webp.t ...................... skipped: no image_filter
available
./index.t .................................. ok
./limit_conn.t ............................. ok
./limit_conn_complex.t ..................... ok
./limit_conn_dry_run.t ..................... ok
./limit_rate.t ............................. ok
./limit_req.t .............................. ok
./limit_req2.t ............................. ok
./limit_req_delay.t ........................ ok
./limit_req_dry_run.t ...................... ok
./mail_capability.t ........................ skipped: no imap available
./mail_error_log.t ......................... skipped: no imap available
./mail_imap.t .............................. skipped: no imap available
./mail_imap_ssl.t .......................... skipped: no imap available
./mail_max_errors.t ........................ skipped: no imap available
./mail_pop3.t .............................. skipped: no pop3 available
./mail_proxy_protocol.t .................... skipped: no smtp available
./mail_proxy_smtp_auth.t ................... skipped: no smtp available
./mail_resolver.t .......................... skipped: no smtp available
./mail_smtp.t .............................. skipped: no smtp available
./mail_smtp_greeting_delay.t ............... skipped: no smtp available
./mail_smtp_xclient.t ...................... skipped: no smtp available
./mail_ssl.t ............................... skipped: no imap available
./mail_ssl_conf_command.t .................. skipped: no imap available
./mail_ssl_session_reuse.t ................. skipped: no imap available
./map.t .................................... ok
./map_complex.t ............................ ok
./map_volatile.t ........................... ok
./memcached.t .............................. skipped: Cache::Memcached
not installed
./memcached_fake.t ......................... ok
./memcached_fake_extra.t ................... ok
./memcached_keepalive.t .................... skipped: Cache::Memcached
not installed
./memcached_keepalive_stale.t .............. skipped: Cache::Memcached
not installed
./merge_slashes.t .......................... ok
./mirror.t ................................. ok
./mirror_proxy.t ........................... ok
./mp4.t .................................... ok
./mp4_ssi.t ................................ ok
./mp4_start_key_frame.t .................... ok
./msie_refresh.t ........................... ok
./not_modified.t ........................... ok
./not_modified_finalize.t .................. ok
./not_modified_proxy.t ..................... ok
./perl.t ................................... skipped: no perl available
./perl_gzip.t .............................. skipped: no perl available
./perl_sleep.t ............................. skipped: no perl available
./perl_ssi.t ............................... skipped: no perl available
./post_action.t ............................ ok
./proxy.t .................................. ok
./proxy_available.t ........................ ok
./proxy_bind.t ............................. ok
./proxy_bind_transparent.t ................. skipped: must be root
./proxy_bind_transparent_capability.t ...... skipped: must be root
./proxy_cache.t ............................ ok
./proxy_cache_bypass.t ..................... ok
./proxy_cache_chunked.t .................... ok
./proxy_cache_control.t .................... ok
./proxy_cache_convert_head.t ............... ok
./proxy_cache_error.t ...................... ok
./proxy_cache_lock.t ....................... ok
./proxy_cache_lock_age.t ................... ok
./proxy_cache_lock_ssi.t ................... ok
./proxy_cache_manager.t .................... skipped: long test
./proxy_cache_max_range_offset.t ........... ok
./proxy_cache_min_free.t ................... ok
./proxy_cache_path.t ....................... ok
./proxy_cache_range.t ...................... ok
./proxy_cache_revalidate.t ................. ok
./proxy_cache_use_stale.t .................. ok
./proxy_cache_valid.t ...................... ok
./proxy_cache_variables.t .................. ok
./proxy_cache_vary.t ....................... ok
./proxy_chunked.t .......................... ok
./proxy_chunked_extra.t .................... ok
./proxy_cookie.t ........................... ok
./proxy_cookie_flags.t ..................... ok
./proxy_duplicate_headers.t ................ ok
./proxy_extra_data.t ....................... ok
./proxy_force_ranges.t ..................... ok
./proxy_if.t ............................... ok
./proxy_implicit.t ......................... ok
./proxy_intercept_errors.t ................. ok
./proxy_keepalive.t ........................ ok
./proxy_limit_rate.t ....................... ok
./proxy_max_temp_file_size.t ............... ok
./proxy_merge_headers.t .................... ok
./proxy_method.t ........................... ok
./proxy_next_upstream.t .................... ok
./proxy_next_upstream_tries.t .............. ok
./proxy_noclose.t .......................... ok
./proxy_non_idempotent.t ................... ok
./proxy_pass_request.t ..................... ok
./proxy_protocol.t ......................... ok
./proxy_protocol2.t ........................ ok
./proxy_protocol2_tlv.t .................... ok
./proxy_protocol_ipv6.t .................... ok
./proxy_protocol_unix.t .................... ok
./proxy_redirect.t ......................... ok
./proxy_request_buffering.t ................ ok
./proxy_request_buffering_chunked.t ........ ok
./proxy_request_buffering_keepalive.t ...... ok
./proxy_request_buffering_ssl.t ............ ok
./proxy_set_body.t ......................... ok
./proxy_ssi_body.t ......................... ok
./proxy_ssl.t .............................. ok
./proxy_ssl_certificate.t .................. ok
./proxy_ssl_certificate_empty.t ............ ok
./proxy_ssl_certificate_vars.t ............. ok
./proxy_ssl_conf_command.t ................. ok
./proxy_ssl_keepalive.t .................... ok
./proxy_ssl_name.t ......................... ok
./proxy_ssl_verify.t ....................... ok
./proxy_store.t ............................ ok
./proxy_unfinished.t ....................... ok
./proxy_unix.t ............................. ok
./proxy_upgrade.t .......................... ok
./proxy_upstream_cookie.t .................. ok
./proxy_variables.t ........................ ok
./proxy_websocket.t ........................ skipped:
Protocol::WebSocket not installed
./proxy_xar.t .............................. ok
./quic_ciphers.t ........................... skipped: no http_v3 available
./quic_key_update.t ........................ skipped: no http_v3 available
./quic_migration.t ......................... skipped: no http_v3 available
./quic_retry.t ............................. skipped: no http_v3 available
./random_index.t ........................... ok
./range.t .................................. ok
./range_charset.t .......................... ok
./range_clearing.t ......................... ok
./range_flv.t .............................. ok
./range_if_range.t ......................... ok
./range_mp4.t .............................. ok
./realip.t ................................. ok
./realip_hostname.t ........................ ok
./realip_remote_addr.t ..................... ok
./realip_remote_port.t ..................... ok
./referer.t ................................ ok
./request_id.t ............................. ok
./rewrite.t ................................ ok
./rewrite_if.t ............................. ok
./rewrite_set.t ............................ ok
./rewrite_unescape.t ....................... ok
./scgi.t ................................... skipped: SCGI not installed
./scgi_body.t .............................. skipped: SCGI not installed
./scgi_cache.t ............................. skipped: SCGI not installed
./scgi_extra_data.t ........................ skipped: SCGI not installed
./scgi_gzip.t .............................. skipped: SCGI not installed
./scgi_merge_params.t ...................... skipped: SCGI not installed
./secure_link.t ............................ ok
./server_tokens.t .......................... ok
./slice.t .................................. ok
./split_clients.t .......................... ok
./ssi.t .................................... ok
./ssi_delayed.t ............................ ok
./ssi_if.t ................................. ok
./ssi_include_big.t ........................ ok
./ssi_waited.t ............................. ok
./ssl.t .................................... ok
./ssl_certificate.t ........................ ok
# Failed test 'intermediate'
# at ./ssl_certificate_chain.t line 137.
# Failed test 'intermediate server'
# at ./ssl_certificate_chain.t line 138.
# Looks like you failed 2 tests of 5.
./ssl_certificate_chain.t ..................
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/5 subtests
./ssl_certificate_perl.t ................... skipped: no perl available
./ssl_certificates.t ....................... ok
./ssl_client_escaped_cert.t ................ ok
./ssl_conf_command.t ....................... ok
# Failed test 'crl - no revoked certs'
# at ./ssl_crl.t line 157.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:46 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: FAILED:unsuitable certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
# Looks like you failed 1 test of 5.
./ssl_crl.t ................................
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/5 subtests
./ssl_curve.t .............................. ok
./ssl_engine_keys.t ........................ skipped: may not work,
leaves coredump
# Failed test 'ocsp leaf'
# at ./ssl_ocsp.t line 273.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'ocsp many failed request'
# at ./ssl_ocsp.t line 277.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:400 Bad.*FAILED:certificate status request
failed)'
# Failed test 'ocsp many failed'
# at ./ssl_ocsp.t line 283.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:400 Bad.*FAILED:certificate status request
failed)'
# Failed test 'ocsp many'
# at ./ssl_ocsp.t line 299.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'cache store'
# at ./ssl_ocsp.t line 303.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'revoked'
# at ./ssl_ocsp.t line 322.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:400 Bad.*FAILED:certificate revoked)'
# Failed test 'ocsp responder'
# at ./ssl_ocsp.t line 326.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'ocsp context'
# at ./ssl_ocsp.t line 330.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'cache lookup'
# at ./ssl_ocsp.t line 334.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'root ca not trusted'
# at ./ssl_ocsp.t line 338.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:400 Bad.*FAILED:certificate status request
failed)'
# Failed test 'ocsp ecdsa'
# at ./ssl_ocsp.t line 350.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS)'
# Failed test 'session reused'
# at ./ssl_ocsp.t line 362.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:200 OK.*SUCCESS:r)'
# Failed test 'session reused - revoked'
# at ./ssl_ocsp.t line 394.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:36:47 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: xFAILED:unsuitable certificate purpose:.x
# X-SSL-Protocol: TLSv1.3
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^s:400 Bad.*FAILED:certificate revoked:r)'
# Looks like you failed 13 tests of 17.
./ssl_ocsp.t ...............................
Dubious, test returned 13 (wstat 3328, 0xd00)
Failed 13/17 subtests
./ssl_password_file.t ...................... ok
./ssl_proxy_protocol.t ..................... ok
./ssl_proxy_upgrade.t ...................... ok
./ssl_reject_handshake.t ................... ok
./ssl_session_reuse.t ...................... ok
./ssl_session_ticket_key.t ................. ok
./ssl_sni.t ................................ ok
./ssl_sni_reneg.t .......................... ok
./ssl_sni_sessions.t ....................... ok
./ssl_stapling.t ........................... ok
./ssl_verify_client.t ...................... ok
# Failed test 'verify depth 1 - int'
# at ./ssl_verify_depth.t line 161.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:37:01 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Client: CN=int
# X-Verify: FAILED:unsuitable certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
# Failed test 'verify depth 2 - int'
# at ./ssl_verify_depth.t line 168.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:37:01 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Client: CN=int
# X-Verify: FAILED:unsuitable certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
# Failed test 'verify depth 2 - end'
# at ./ssl_verify_depth.t line 169.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Fri, 26 Jan 2024 11:37:01 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Client: CN=end
# X-Verify: FAILED:unsuitable certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
# Looks like you failed 3 tests of 11.
./ssl_verify_depth.t .......................
Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/11 subtests
./stream_access.t .......................... ok
./stream_access_log.t ...................... ok
./stream_access_log_escape.t ............... ok
./stream_access_log_none.t ................. ok
./stream_error_log.t ....................... ok
./stream_geo.t ............................. ok
./stream_geo_binary.t ...................... skipped: long configuration
parsing
./stream_geo_ipv6.t ........................ ok
./stream_geo_unix.t ........................ ok
./stream_geoip.t ........................... skipped: no stream_geoip
available
./stream_limit_conn.t ...................... ok
./stream_limit_conn_complex.t .............. ok
./stream_limit_conn_dry_run.t .............. ok
./stream_limit_rate.t ...................... ok
./stream_limit_rate2.t ..................... ok
./stream_map.t ............................. ok
./stream_proxy.t ........................... ok
./stream_proxy_bind.t ...................... ok
./stream_proxy_complex.t ................... ok
./stream_proxy_half_close.t ................ ok
./stream_proxy_next_upstream.t ............. ok
./stream_proxy_protocol.t .................. ok
./stream_proxy_protocol2_tlv.t ............. ok
./stream_proxy_protocol_ipv6.t ............. ok
./stream_proxy_protocol_ssl.t .............. ok
./stream_proxy_ssl.t ....................... ok
./stream_proxy_ssl_certificate.t ........... ok
./stream_proxy_ssl_certificate_vars.t ...... ok
./stream_proxy_ssl_conf_command.t .......... ok
./stream_proxy_ssl_name.t .................. ok
./stream_proxy_ssl_name_complex.t .......... ok
./stream_proxy_ssl_verify.t ................ ok
./stream_realip.t .......................... ok
./stream_realip_hostname.t ................. ok
./stream_resolver.t ........................ ok
./stream_set.t ............................. ok
./stream_split_clients.t ................... ok
./stream_ssl.t ............................. ok
./stream_ssl_alpn.t ........................ ok
./stream_ssl_certificate.t ................. ok
./stream_ssl_conf_command.t ................ ok
./stream_ssl_preread.t ..................... ok
./stream_ssl_preread_alpn.t ................ ok
./stream_ssl_preread_protocol.t ............ ok
./stream_ssl_realip.t ...................... ok
./stream_ssl_session_reuse.t ............... ok
./stream_ssl_variables.t ................... ok
./stream_ssl_verify_client.t ............... ok
./stream_status_variable.t ................. ok
./stream_tcp_nodelay.t ..................... ok
./stream_udp_limit_conn.t .................. ok
./stream_udp_limit_rate.t .................. ok
./stream_udp_proxy.t ....................... ok
./stream_udp_proxy_requests.t .............. ok
./stream_udp_stream.t ...................... ok
./stream_udp_upstream.t .................... ok
./stream_udp_upstream_hash.t ............... ok
./stream_udp_upstream_least_conn.t ......... ok
./stream_udp_wildcard.t .................... skipped: listen on wildcard
address
./stream_unix.t ............................ ok
./stream_upstream.t ........................ ok
./stream_upstream_hash.t ................... ok
./stream_upstream_least_conn.t ............. ok
./stream_upstream_max_conns.t .............. ok
./stream_upstream_random.t ................. ok
./stream_upstream_zone.t ................... ok
./stream_upstream_zone_ssl.t ............... ok
./stream_variables.t ....................... ok
./stub_status.t ............................ ok
./sub_filter.t ............................. ok
./sub_filter_buffering.t ................... ok
./sub_filter_merge.t ....................... ok
./sub_filter_multi.t ....................... ok
./sub_filter_multi2.t ...................... ok
./sub_filter_perl.t ........................ skipped: no perl available
./sub_filter_slice.t ....................... ok
./sub_filter_ssi.t ......................... skipped: no xslt available
./subrequest_output_buffer_size.t .......... ok
./syslog.t ................................. ok
./trailers.t ............................... ok
./upstream.t ............................... ok
./upstream_hash.t .......................... ok
./upstream_hash_memcached.t ................ skipped: Cache::Memcached
not installed
./upstream_ip_hash.t ....................... ok
./upstream_ip_hash_ipv6.t .................. ok
./upstream_keepalive.t ..................... ok
./upstream_least_conn.t .................... ok
./upstream_max_conns.t ..................... ok
./upstream_random.t ........................ ok
./upstream_zone.t .......................... ok
./upstream_zone_ssl.t ...................... ok
./userid.t ................................. ok
./userid_flags.t ........................... ok
./uwsgi.t .................................. skipped: uwsgi not found
./uwsgi_body.t ............................. skipped: uwsgi not found
./uwsgi_ssl.t .............................. skipped: uwsgi not found
./uwsgi_ssl_certificate.t .................. ok
./uwsgi_ssl_certificate_vars.t ............. ok
./uwsgi_ssl_verify.t ....................... skipped: uwsgi not found
./worker_shutdown_timeout.t ................ ok
./worker_shutdown_timeout_h2.t ............. ok
./worker_shutdown_timeout_mail.t ........... skipped: no imap available
./worker_shutdown_timeout_proxy_upgrade.t .. ok
./worker_shutdown_timeout_stream.t ......... ok
./xslt.t ................................... skipped: no xslt available
./xslt_params.t ............................ skipped: no xslt available
Test Summary Report
-------------------
./ssl_certificate_chain.t (Wstat: 512 (exited 2) Tests: 5
Failed: 2)
Failed tests: 2-3
Non-zero exit status: 2
./ssl_crl.t (Wstat: 256 (exited 1) Tests: 5
Failed: 1)
Failed test: 1
Non-zero exit status: 1
./ssl_ocsp.t (Wstat: 3328 (exited 13) Tests:
17 Failed: 13)
Failed tests: 1-13
Non-zero exit status: 13
./ssl_verify_depth.t (Wstat: 768 (exited 3) Tests:
11 Failed: 3)
Failed tests: 5, 8-9
Non-zero exit status: 3
Files=416, Tests=4620, 423 wallclock secs ( 2.27 usr 0.88 sys + 78.05
cusr 14.15 csys = 95.35 CPU)
Result: FAIL
--
Renato Botelho
More information about the nginx-devel
mailing list