Bug 1348918

Summary: Recent OpenSSL breaks Ruby test suite
Product: Red Hat Software Collections Reporter: Jun Aruga <jaruga>
Component: rubyAssignee: Jun Aruga <jaruga>
Status: CLOSED ERRATA QA Contact: Iveta Wiedermann <isenfeld>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rh-ruby22CC: isenfeld, lkuprova, vondruch
Target Milestone: alpha   
Target Release: 2.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
If this bug requires documentation, please select an appropriate Doc Type value. => This is our release environment's internal issue related on OpenSSL version. No needed document.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-25 08:48:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1317076    

Description Jun Aruga 2016-06-22 10:12:18 UTC 
Description of problem:

Recent OpenSSL breaks ruby test suite,


```
  1) Error:
TestGemRemoteFetcher#test_ssl_client_cert_auth_connection:
Gem::RemoteFetcher::FetchError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate request A: dh key too small (https://localhost:46843/yaml)
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:88:in `rescue in connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:85:in `connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:140:in `perform_request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:109:in `fetch'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:352:in `request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:237:in `fetch_http'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:273:in `fetch_path'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:748:in `block in test_ssl_client_cert_auth_connection'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:806:in `with_configured_fetcher'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:745:in `test_ssl_client_cert_auth_connection'
  2) Error:
TestGemRemoteFetcher#test_ssl_connection:
Gem::RemoteFetcher::FetchError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate request A: dh key too small (https://localhost:50512/yaml)
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:88:in `rescue in connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:85:in `connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:140:in `perform_request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:109:in `fetch'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:352:in `request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:237:in `fetch_http'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:273:in `fetch_path'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:731:in `block in test_ssl_connection'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:806:in `with_configured_fetcher'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:730:in `test_ssl_connection'
  3) Error:
TestGemRemoteFetcher#test_ssl_connection_allow_verify_none:
Gem::RemoteFetcher::FetchError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate request A: dh key too small (https://localhost:59491/yaml)
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:88:in `rescue in connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:85:in `connection_for'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:140:in `perform_request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/request.rb:109:in `fetch'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:352:in `request'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:237:in `fetch_http'
    /builddir/build/BUILD/ruby-2.2.2/lib/rubygems/remote_fetcher.rb:273:in `fetch_path'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:783:in `block in test_ssl_connection_allow_verify_none'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:806:in `with_configured_fetcher'
    /builddir/build/BUILD/ruby-2.2.2/test/rubygems/test_gem_remote_fetcher.rb:782:in `test_ssl_connection_allow_verify_none'
16012 tests, 2886828 assertions, 0 failures, 3 errors, 41 skips
ruby -v: ruby 2.2.2p95 (2015-04-13 revision 50295) [x86_64-linux-gnu]

```

It worked on openssl.x86_64 0:1.0.1e-16.el6_5.15 .

Version-Release number of selected component (if applicable):

OpenSSL: openssl.x86_64 0:1.0.1e-30.el6_6.12
Ruby: rh-ruby22-ruby-2.2.2-13.el6


How reproducible:

Steps to Reproduce:
1. rhpkg scratch-build rh-ruby22-ruby-2.2.2-13.el6.src.rpm

Actual results: Build failure

Expected results: Build success

Additional info:
Comment 4 errata-xmlrpc 2016-07-25 08:48:20 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-1482.html