Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security unitTest failing on 6.8 #72877

Closed
przemekwitek opened this issue May 10, 2021 · 4 comments
Closed

Security unitTest failing on 6.8 #72877

przemekwitek opened this issue May 10, 2021 · 4 comments
Assignees
Labels
>test-failure Triaged test failures from CI

Comments

@przemekwitek
Copy link
Contributor

Build scan:

https://gradle-enterprise.elastic.co/s/enpxpvv6bftdi

Repro line:

REPRODUCE WITH: ./gradlew ':x-pack:plugin:security:unitTest' \
  -Dtests.seed=6A7DC4983CF0CBD1 \
  -Dtests.class=org.elasticsearch.xpack.security.authc.ldap.LdapSessionFactoryTests \
  -Dtests.method="testDeprecationWarningIfTls1IsUsed" \
  -Dtests.security.manager=true \
  -Dtests.locale=kk \
  -Dtests.timezone=Asia/Jerusalem \
  -Dcompiler.java=11 \
  -Druntime.java=11

REPRODUCE WITH: ./gradlew ':x-pack:plugin:security:unitTest' \
  -Dtests.seed=6A7DC4983CF0CBD1 \
  -Dtests.class=org.elasticsearch.xpack.security.transport.ssl.SslIntegrationTests \
  -Dtests.method="testDeprecationWarningWhenHttpClientConnectsWithTLS1" \
  -Dtests.security.manager=true \
  -Dtests.locale=fr-RE \
  -Dtests.timezone=Asia/Choibalsan \
  -Dcompiler.java=11 \
  -Druntime.java=11

REPRODUCE WITH: ./gradlew ':x-pack:plugin:security:unitTest' \
  -Dtests.seed=6A7DC4983CF0CBD1 \
  -Dtests.class=org.elasticsearch.xpack.security.transport.ssl.SslIntegrationTests \
  -Dtests.method="testServerLogsDeprecationWarningWhenTransportClientConnectsWithTLS1" \
  -Dtests.security.manager=true \
  -Dtests.locale=fr-RE \
  -Dtests.timezone=Asia/Choibalsan \
  -Dcompiler.java=11 \
  -Druntime.java=11

Reproduces locally?:
Don't know, I had some local setup issues with this branch.

Applicable branches:
6.8

Failure history:

Failures of this test started around May 6:
https://groups.google.com/a/elastic.co/g/build-elasticsearch/search?q=%3Ax-pack%3Aplugin%3Asecurity%3AunitTest

Failure excerpt:

11:04:57 > Task :x-pack:plugin:security:unitTest FAILED
11:04:57 Tests with failures:
11:04:57   - org.elasticsearch.xpack.security.authc.ldap.LdapSessionFactoryTests.testDeprecationWarningIfTls1IsUsed
11:04:57   - org.elasticsearch.xpack.security.transport.ssl.SslIntegrationTests.testDeprecationWarningWhenHttpClientConnectsWithTLS1
11:04:57   - org.elasticsearch.xpack.security.transport.ssl.SslIntegrationTests.testServerLogsDeprecationWarningWhenTransportClientConnectsWithTLS1
11:04:57 
11:04:57 Slow Tests Summary:
11:04:57 147.25s | org.elasticsearch.xpack.security.authz.ReadActionsTests
11:04:57  99.08s | org.elasticsearch.xpack.security.authz.IndexAliasesTests
11:04:57  94.00s | org.elasticsearch.xpack.security.authc.esnative.NativeRealmIntegTests
11:04:57  93.43s | org.elasticsearch.integration.KibanaUserRoleIntegTests
11:04:57  87.46s | org.elasticsearch.xpack.security.authc.ApiKeyIntegTests
@przemekwitek przemekwitek added >test-failure Triaged test failures from CI Team:Security Meta label for security team labels May 10, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@ywangd
Copy link
Member

ywangd commented May 10, 2021

This is the same failure as #72396
TLS 1.0 and 1.1 is disabled (JDK-8202343) in latest release of all zulu JDK builds. This is also the case for AdoptOpenJDK builds. TLS 1.1 can still be explicitly enabled by updating the java.security file. But I don't think it worth the trouble. Anyway, I am going to mute them for now.

ywangd added a commit that referenced this issue May 10, 2021
The latest JDK releases disable TLSv1 and TLSv1.1 by default and the
related tests always fail.
See #72877 for more
details.
@probakowski
Copy link
Contributor

probakowski commented May 12, 2021

@pgomulka pgomulka added :Security/Security Security issues without another label and removed :Security/Security Security issues without another label labels May 27, 2021
@elasticmachine elasticmachine removed the Team:Security Meta label for security team label May 27, 2021
@tvernum tvernum self-assigned this Jul 14, 2021
@tvernum
Copy link
Contributor

tvernum commented Mar 8, 2022

Closing because we no longer maintain 6.8 and won't be investing in these test.

@tvernum tvernum closed this as completed Mar 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>test-failure Triaged test failures from CI
Projects
None yet
Development

No branches or pull requests

6 participants