Welcome! Log In Create A New Profile

Advanced

nginx-tests SSL tests failing out of the box?

Mayerhofer, Austin via nginx-devel
January 25, 2024 02:02PM
Hi all,

I have not made any changes to NGINX. Vanilla NGINX (./configure with no flags) passes all tests that run, but when compiling with SSL, not all SSL tests are passing. Is this expected, or do I need to configure nginx further aside from adding the --with-http_ssl_module flag? Do each of the failing tests below require separate fixes, or is there a one-size-fits-all solution for all of them?

OS: MacOS 12.6.3
Chip: Apple M1 Max
NGINX: 1.24.0 built from source code with ./configure --with-debug --with-http_ssl_module
Nginx-tests: https://github.com/nginx/nginx-tests/tree/4c2ad8093952706f327d04887c5546bad91b75a6
OpenSSL: 3.2.0 (/opt/homebrew/bin/openssl)
Perl: 5.30.3 (/usr/bin/perl)

When I run

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl.t
```

I see

```
not ok 2 - session reused

# Failed test 'session reused'
# at ssl.t line 187.
# 'HTTP/1.1 200 OK
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:50:10 GMT
# Content-Type: text/plain
# Content-Length: 6
# Connection: close
#
# body .'
# doesn't match '(?^m:^body r$)'
```

When I run

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_certificate.t
```

I see

```
not ok 9 - session id context match

# Failed test 'session id context match'
# at ssl_certificate.t line 183.
# 'HTTP/1.1 200 OK
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:52:11 GMT
# Content-Type: text/html
# Content-Length: 0
# Last-Modified: Thu, 25 Jan 2024 18:52:11 GMT
# Connection: close
# ETag: "65b2addb-0"
# X-SSL: default:.
# X-SSL-Protocol: TLSv1.3
# Accept-Ranges: bytes
#
# '
# doesn't match '(?^:default:r)'
```

And finally running

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_crl.t
```

Yields

```
not ok 1 - crl - no revoked certs

# Failed test 'crl - no revoked certs'
# at ssl_crl.t line 157.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:53:50 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: FAILED:unsupported certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
```

Thanks,
Austin


This message has been scanned for malware by Forcepoint. www.forcepoint.com
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

nginx-tests SSL tests failing out of the box?

Mayerhofer, Austin via nginx-devel 210 January 25, 2024 02:02PM

Re: nginx-tests SSL tests failing out of the box?

Andrey Kulikov 43 January 25, 2024 02:54PM

Re: nginx-tests SSL tests failing out of the box?

Mayerhofer, Austin via nginx-devel 44 January 25, 2024 06:22PM

Re: nginx-tests SSL tests failing out of the box?

Maxim Dounin 38 January 25, 2024 03:40PM

Re: nginx-tests SSL tests failing out of the box?

Sergey Kandaurov 40 January 26, 2024 12:32PM

Re: nginx-tests SSL tests failing out of the box?

Maxim Dounin 40 January 26, 2024 11:20PM

Re: nginx-tests SSL tests failing out of the box?

Maxim Dounin 43 January 28, 2024 10:26PM

Re: nginx-tests SSL tests failing out of the box?

Sergey Kandaurov 39 January 29, 2024 08:24AM

Re: nginx-tests SSL tests failing out of the box?

Maxim Dounin 53 January 29, 2024 07:20PM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 335
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready