Unit test failure with OpenSSL 1.1.1
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Compute (nova) |
In Progress
|
Low
|
Corey Bryant | ||
Ubuntu Cloud Archive |
Fix Released
|
High
|
Unassigned | ||
Queens |
Fix Released
|
High
|
Unassigned | ||
Rocky |
Fix Released
|
High
|
Unassigned | ||
Stein |
Fix Released
|
High
|
Unassigned | ||
nova (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Bionic |
Fix Released
|
High
|
Unassigned | ||
Cosmic |
Fix Released
|
High
|
Unassigned | ||
Disco |
Fix Released
|
High
|
Unassigned |
Bug Description
Hi,
Building the Nova Queens package with OpenSSL 1.1.1 leads to unit test problems. This was reported to Debian at: https:/
The new openssl 1.1.1 is currently in experimental [0]. This package failed to build against this new package [1] while it built fine against the openssl version currently in unstable [2]. Could you please have a look?
FAIL: nova.tests.
|nova.tests.
|------
|_StringException: pythonlogging:'': {{{2018-05-01 20:48:09,960 WARNING [oslo_config.cfg] Config option key_manager.
|
|Traceback (most recent call last):
| File "/<<PKGBUILDDIR
| self._test_
| File "/<<PKGBUILDDIR
| enc = self.alice.
| File "/<<PKGBUILDDIR
| return self._run_
| File "/<<PKGBUILDDIR
| raise RuntimeError(
|RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
|Using -iter or -pbkdf2 would be better.
It looks like due to additional message on stderr.
[0] https://<email address hidden>
[1] https:/
[2] https:/
tags: | added: xen |
tags: | added: testing |
Changed in nova: | |
importance: | Undecided → Low |
status: | New → Confirmed |
tags: | added: patch |
seems some key deprecated ? can we check [0] above to know which of follow param lead to error?
best way would be within 1.1.1 env to consturct a command string and try it ..
|RuntimeError: OpenSSL error: *** WARNING : deprecated key derivation used.
|Using -iter or -pbkdf2 would be better.
def _run_ssl(self, text, decrypt=False):
'pass: %s' % self._shared, '-nosalt']
cmd. append( '-d')
process_ input=encodeuti ls.safe_ encode( text)) _('OpenSSL error: %s') % err)
cmd = ['openssl', 'aes-128-cbc', '-A', '-a', '-pass',
if decrypt:
out, err = utils.execute(*cmd,
if err:
raise RuntimeError(
return out