Bug 2231002 - smime certificates in self-test are expired
Summary: smime certificates in self-test are expired
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: compat-openssl10
Version: 8.8
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Dmitry Belyavskiy
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-08-10 11:05 UTC by Ondrej Moriš
Modified: 2023-08-16 10:45 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-165481 0 None None None 2023-08-10 11:06:09 UTC

Description Ondrej Moriš 2023-08-10 11:05:09 UTC 
Description of problem:

Certificates used in self-test are expired and make it failing:

./test/smime-certs/smdsa2.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa3.pem: notAfter=May 26 17:28:30 2023 GMT
./test/smime-certs/smdsa3.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smdsa1.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smec1.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa2.pem: notAfter=May 26 17:28:30 2023 GMT
./test/smime-certs/smdh.pem: notAfter=Jun 11 14:49:29 2023 GMT
./test/smime-certs/smroot.pem: notAfter=Jul 15 17:28:29 2023 GMT
./test/smime-certs/smec2.pem: notAfter=May 26 17:28:31 2023 GMT
./test/smime-certs/smrsa1.pem: notAfter=May 26 17:28:30 2023 GMT

Version-Release number of selected component (if applicable):

compat-openssl10-1.0.2o-4.el8_6

How reproducible:

100%

Steps to Reproduce:

1. Execute self-test (make tests)
   - it happens during the build 
   - and in TC#0598673 - /CoreOS/compat-openssl10/Sanity/upstream-testsuite

Actual results:

CMS consistency test
/usr/bin/perl cms-test.pl
CMS => PKCS#7 compatibility tests
signed content DER format, RSA key: verify error
make[2]: *** [Makefile:344: test_cms] Error 1
make[2]: Leaving directory '/tmp/tmp.AwxpqiL1O8/BUILD/openssl-1.0.2o/test'
make[1]: *** [Makefile:477: tests] Error 2
make[1]: Leaving directory '/tmp/tmp.AwxpqiL1O8/BUILD/openssl-1.0.2o'

Expected results:

All tests pass.
Comment 1 Dmitry Belyavskiy 2023-08-15 13:11:26 UTC 
We should fix it at some moment
Note You need to log in before you can comment on or make changes to this bug.