Welcome! Log In Create A New Profile

nginx-tests SSL tests failing out of the box?

Forum List Message List New Topic Print View

Mayerhofer, Austin via nginx-devel

January 25, 2024 02:02PM

Hi all,

I have not made any changes to NGINX. Vanilla NGINX (./configure with no flags) passes all tests that run, but when compiling with SSL, not all SSL tests are passing. Is this expected, or do I need to configure nginx further aside from adding the --with-http_ssl_module flag? Do each of the failing tests below require separate fixes, or is there a one-size-fits-all solution for all of them?

OS: MacOS 12.6.3
Chip: Apple M1 Max
NGINX: 1.24.0 built from source code with ./configure --with-debug --with-http_ssl_module
Nginx-tests: https://github.com/nginx/nginx-tests/tree/4c2ad8093952706f327d04887c5546bad91b75a6
OpenSSL: 3.2.0 (/opt/homebrew/bin/openssl)
Perl: 5.30.3 (/usr/bin/perl)

When I run

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl.t
```

I see

```
not ok 2 - session reused

# Failed test 'session reused'
# at ssl.t line 187.
# 'HTTP/1.1 200 OK
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:50:10 GMT
# Content-Type: text/plain
# Content-Length: 6
# Connection: close
#
# body .'
# doesn't match '(?^m:^body r$)'
```

When I run

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_certificate.t
```

I see

```
not ok 9 - session id context match

# Failed test 'session id context match'
# at ssl_certificate.t line 183.
# 'HTTP/1.1 200 OK
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:52:11 GMT
# Content-Type: text/html
# Content-Length: 0
# Last-Modified: Thu, 25 Jan 2024 18:52:11 GMT
# Connection: close
# ETag: "65b2addb-0"
# X-SSL: default:.
# X-SSL-Protocol: TLSv1.3
# Accept-Ranges: bytes
#
# '
# doesn't match '(?^:default:r)'
```

And finally running

```
TEST_NGINX_BINARY=/usr/local/nginx/sbin/nginx prove -v ssl_crl.t
```

Yields

```
not ok 1 - crl - no revoked certs

# Failed test 'crl - no revoked certs'
# at ssl_crl.t line 157.
# 'HTTP/1.1 400 Bad Request
# Server: nginx/1.24.0
# Date: Thu, 25 Jan 2024 18:53:50 GMT
# Content-Type: text/html
# Content-Length: 215
# Connection: close
# X-Verify: FAILED:unsupported certificate purpose
#
# <html>
# <head><title>400 The SSL certificate error</title></head>
# <body>
# <center><h1>400 Bad Request</h1></center>
# <center>The SSL certificate error</center>
# <hr><center>nginx/1.24.0</center>
# </body>
# </html>
# '
# doesn't match '(?^:SUCCESS)'
```

Thanks,
Austin

This message has been scanned for malware by Forcepoint. www.forcepoint.com
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx-devel

Reply Quote

RSS

Subject	Author	Views	Posted
nginx-tests SSL tests failing out of the box?	Mayerhofer, Austin via nginx-devel	342	January 25, 2024 02:02PM
Re: nginx-tests SSL tests failing out of the box?	Andrey Kulikov	96	January 25, 2024 02:54PM
Re: nginx-tests SSL tests failing out of the box?	Mayerhofer, Austin via nginx-devel	115	January 25, 2024 06:22PM
Re: nginx-tests SSL tests failing out of the box?	Maxim Dounin	91	January 25, 2024 03:40PM
Re: nginx-tests SSL tests failing out of the box?	Sergey Kandaurov	88	January 26, 2024 12:32PM
Re: nginx-tests SSL tests failing out of the box?	Maxim Dounin	95	January 26, 2024 11:20PM
Re: nginx-tests SSL tests failing out of the box?	Maxim Dounin	98	January 28, 2024 10:26PM
Re: nginx-tests SSL tests failing out of the box?	Sergey Kandaurov	91	January 29, 2024 08:24AM
Re: nginx-tests SSL tests failing out of the box?	Maxim Dounin	104	January 29, 2024 07:20PM

Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 138

Record Number of Users: 8 on April 13, 2023

Record Number of Guests: 500 on July 15, 2024