Uploaded image for project: 'PHP Driver: Library'
  1. PHP Driver: Library
  2. PHPLIB-803

ClientSideEncryptionSpecTest failures due to OCSP and certificate verification on RHEL 7.0

    • Type: Icon: Build Failure Build Failure
    • Resolution: Unresolved
    • Priority: Icon: Unknown Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None

      The following variants have test failures related to OCSP and certificate verification issues:

      • RHEL 7.0, MongoDB 5.0, PHP 7.2, ext-mongodb 1.13-dev (master)
      • RHEL 7.0, MongoDB 5.0, PHP 7.3, ext-mongodb 1.13-dev (master)
      • RHEL 7.0, MongoDB 5.0, PHP 7.4, ext-mongodb 1.13-dev (master)

      For example, build 103c1f2ea5 has the following task failures:

      Snippet from task logs:

      [2022/03/01 05:23:57.115] There were 4 errors:
      [2022/03/01 05:23:57.115] 1) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testDataKeyAndDoubleEncryption with data set "azure" ('azure', array('key-vault-csfle.vault.azure.net', 'key-name-csfle'))
      [2022/03/01 05:23:57.115] MongoDB\Driver\Exception\ConnectionTimeoutException: TLS handshake failed: Failed OCSP verification
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:240
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/CommandObserver.php:30
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:244
      [2022/03/01 05:23:57.115] 2) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testCorpus with data set #0 (true)
      [2022/03/01 05:23:57.115] MongoDB\Driver\Exception\ConnectionTimeoutException: TLS handshake failed: Failed OCSP verification
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:1220
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:1272
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:605
      [2022/03/01 05:23:57.115] 3) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testCorpus with data set #1 (false)
      [2022/03/01 05:23:57.115] MongoDB\Driver\Exception\ConnectionTimeoutException: TLS handshake failed: Failed OCSP verification
      [2022/03/01 05:23:57.115] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:1220
      [2022/03/01 05:23:57.116] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:1272
      [2022/03/01 05:23:57.116] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:605
      [2022/03/01 05:23:57.116] 4) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testCustomEndpoint with data set "Test 7" (Closure Object (...))
      [2022/03/01 05:23:57.116] MongoDB\Driver\Exception\ConnectionTimeoutException: TLS handshake failed: Failed OCSP verification
      [2022/03/01 05:23:57.116] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:742
      [2022/03/01 05:23:57.116] /data/mci/73811c31b40e1af3faf4dc117f077518/src/tests/SpecTests/ClientSideEncryptionSpecTest.php:677
      [2022/03/01 05:23:57.116] --
      [2022/03/01 05:23:57.116] There were 5 failures:
      [2022/03/01 05:23:57.116] 1) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testInvalidHostnameInKmsCertificate
      [2022/03/01 05:23:57.116] Failed asserting that exception message 'TLS handshake failed: Failed certificate verification' matches '#IP address mismatch#'.
      [2022/03/01 05:23:57.116] 2) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testKmsTlsOptions with data set "AWS: client_encryption_invalid_hostname" (Closure Object (...))
      [2022/03/01 05:23:57.116] Failed asserting that exception message 'TLS handshake failed: Failed certificate verification' matches '#IP address mismatch#'.
      [2022/03/01 05:23:57.116] 3) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testKmsTlsOptions with data set "Azure: client_encryption_invalid_hostname" (Closure Object (...))
      [2022/03/01 05:23:57.116] Failed asserting that exception message 'TLS handshake failed: Failed certificate verification' matches '#IP address mismatch#'.
      [2022/03/01 05:23:57.116] 4) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testKmsTlsOptions with data set "GCP: client_encryption_invalid_hostname" (Closure Object (...))
      [2022/03/01 05:23:57.116] Failed asserting that exception message 'TLS handshake failed: Failed certificate verification' matches '#IP address mismatch#'.
      [2022/03/01 05:23:57.116] 5) MongoDB\Tests\SpecTests\ClientSideEncryptionSpecTest::testKmsTlsOptions with data set "KMIP: client_encryption_invalid_hostname" (Closure Object (...))
      [2022/03/01 05:23:57.116] Failed asserting that exception message 'TLS handshake failed: Failed certificate verification' matches '#IP address mismatch#'.
      

      These test failures started appearing after PHPLIB-773 was merged (compare ddcc4de241 to fef895def9), but that is likely only because the CSFLE tests were previously being skipped due to an undefined environment variable.

            Assignee:
            Unassigned Unassigned
            Reporter:
            jmikola@mongodb.com Jeremy Mikola
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: