Bug 2231002

Summary:	smime certificates in self-test are expired
Product:	Red Hat Enterprise Linux 8	Reporter:	Ondrej Moriš <omoris>
Component:	compat-openssl10	Assignee:	Dmitry Belyavskiy <dbelyavs>
Status:	NEW ---	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	low
Version:	8.8	CC:	cllang
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ondrej Moriš 2023-08-10 11:05:09 UTC

Description of problem:

Certificates used in self-test are expired and make it failing:

./test/smime-certs/smdsa2.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa3.pem: notAfter=May 26 17:28:30 2023 GMT
./test/smime-certs/smdsa3.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smdsa1.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smec1.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa2.pem: notAfter=May 26 17:28:30 2023 GMT
./test/smime-certs/smdh.pem: notAfter=Jun 11 14:49:29 2023 GMT
./test/smime-certs/smroot.pem: notAfter=Jul 15 17:28:29 2023 GMT
./test/smime-certs/smec2.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa1.pem: notAfter=May 26 17:28:30 2023 GMT

Version-Release number of selected component (if applicable):

compat-openssl10-1.0.2o-4.el8_6

How reproducible:

100%

Steps to Reproduce:

1. Execute self-test (make tests)
   - it happens during the build 
   - and in TC#0598673 - /CoreOS/compat-openssl10/Sanity/upstream-testsuite

Actual results:

CMS consistency test
/usr/bin/perl cms-test.pl
CMS => PKCS#7 compatibility tests
signed content DER format, RSA key: verify error
make[2]: *** [Makefile:344: test_cms] Error 1
make[2]: Leaving directory '/tmp/tmp.AwxpqiL1O8/BUILD/openssl-1.0.2o/test'
make[1]: *** [Makefile:477: tests] Error 2
make[1]: Leaving directory '/tmp/tmp.AwxpqiL1O8/BUILD/openssl-1.0.2o'

Expected results:

All tests pass.

Comment 1 Dmitry Belyavskiy 2023-08-15 13:11:26 UTC

We should fix it at some moment