Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 939786 - www-servers/puma-6.4.2: fails tests (expired certs)
Summary: www-servers/puma-6.4.2: fails tests (expired certs)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Ruby Team
URL:
Whiteboard:
Keywords: TESTFAILURE
Depends on:
Blocks: 938964
  Show dependency tree
 
Reported: 2024-09-17 17:51 UTC by Sam James
Modified: 2024-09-22 05:34 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (file_939786.txt,13.40 KB, text/plain)
2024-09-17 17:51 UTC, Sam James
Details
emerge --info (emerge.info,7.62 KB, text/plain)
2024-09-18 12:28 UTC, Filip Kobierski
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-17 17:51:26 UTC
Created attachment 903229 [details]
build.log

Errors & Failures:

  1) Failure:
TestPumaServerSSLWithCertPemAndKeyPem#test_server_ssl_with_cert_pem_and_key_pem [test/test_puma_server_ssl.rb:503]:
Expected #<OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 peeraddr=127.0.0.1:42925 state=error: certificate verify failed (certificate has expired)> to be nil.

  2) Failure:
TestExampleCertExpiration#test_certs_not_expired [test/test_example_cert_expiration.rb:40]:
Cert puma/cert_puma.pem has expired. Check the puma for a `.rb` with instructions on how to regenerate.

  3) Error:
TestPluginSystemd#test_systemd_notify_usr2_hot_restart_cluster:
Errno::EPIPE: Broken pipe
    test/test_plugin_systemd.rb:90:in `write'
    test/test_plugin_systemd.rb:90:in `assert_restarts_with_systemd'
    test/test_plugin_systemd.rb:42:in `test_systemd_notify_usr2_hot_restart_cluster'
    test/helper.rb:92:in `block (4 levels) in run'
    /usr/lib64/ruby/gems/3.1.0/gems/timeout-0.3.2/lib/timeout.rb:189:in `block in timeout'
    /usr/lib64/ruby/gems/3.1.0/gems/timeout-0.3.2/lib/timeout.rb:196:in `timeout'
    test/helper.rb:90:in `block (3 levels) in run'

  4) Failure:
TestPumaServerSSLClient#test_verify_client_cert [test/test_puma_server_ssl.rb:348]:
SSL_connect returned=1 errno=0 peeraddr=127.0.0.1:43393 state=error: certificate verify failed (certificate has expired).
Expected: false
  Actual: true

  5) Failure:
TestPumaServerSSLClient#test_verify_fail_if_client_expired_cert [test/test_puma_server_ssl.rb:338]:
--- expected
+++ actual
@@ -1 +1,3 @@
-"/DC=net/DC=puma/CN=localhost"
+# encoding: ASCII-8BIT
+#    valid: true
+"/DC=net/DC=puma/CN=CA"


531 runs, 1309 assertions, 4 failures, 1 errors, 7 skips

You have skipped tests. Run with --verbose for details.
 * ERROR: www-servers/puma-6.4.2::gentoo failed (test phase):
 *   (no error message)

----

# emerge --info
Portage 3.0.65 (python 3.12.6-final-0, default/linux/amd64/23.0/desktop/plasma/systemd, gcc-13, glibc-2.39-r6, 6.10.10 x86_64)
=================================================================
System uname: Linux-6.10.10-x86_64-AMD_Ryzen_9_3950X_16-Core_Processor-with-glibc2.39
KiB Mem:    65739264 total,   6378228 free
KiB Swap:   16662520 total,      1428 free
Timestamp of repository gentoo: Tue, 17 Sep 2024 15:36:05 +0000
sh bash 5.2_p26-r6
ld GNU ld (Gentoo 2.42 p3) 2.42.0
app-misc/pax-utils:        1.3.7::gentoo
app-shells/bash:           5.2_p26-r6::gentoo
dev-build/autoconf:        2.13-r8::gentoo, 2.71-r7::gentoo
dev-build/automake:        1.16.5-r2::gentoo
dev-build/cmake:           3.30.2::gentoo
dev-build/libtool:         2.4.7-r4::gentoo
dev-build/make:            4.4.1-r1::gentoo
dev-build/meson:           1.5.1::gentoo
dev-java/java-config:      2.3.4::gentoo
dev-lang/perl:             5.40.0::gentoo
dev-lang/python:           3.8.20::gentoo, 3.9.20::gentoo, 3.10.15::gentoo, 3.11.10::gentoo, 3.12.6::gentoo
dev-lang/rust-bin:         1.80.1::gentoo
sys-apps/baselayout:       2.15::gentoo
sys-apps/sandbox:          2.38::gentoo
sys-apps/systemd:          255.11::gentoo
sys-devel/binutils:        2.42-r1::gentoo
sys-devel/binutils-config: 5.5::gentoo
sys-devel/clang:           18.1.8::gentoo
sys-devel/gcc:             13.3.1_p20240614::gentoo
sys-devel/gcc-config:      2.11::gentoo
sys-devel/lld:             18.1.8::gentoo
sys-devel/llvm:            18.1.8-r1::gentoo
sys-kernel/linux-headers:  6.6-r1::gentoo (virtual/os-headers)
sys-libs/glibc:            2.39-r6::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    volatile: False
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts: 
    sync-rsync-verify-max-age: 3
    sync-rsync-verify-metamanifest: yes

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.9/conf"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe"
DISTDIR="/var/cache/distfiles"
EMERGE_DEFAULT_OPTS="--keep-going --complete-graph --usepkg=y"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg buildpkg-live clean-logs config-protect-if-modified distlocks fixlafiles ipc-sandbox merge-wait multilib-strict network-sandbox news parallel-fetch parallel-install pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms split-elog split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="https://www.mirrorservice.org/sites/distfiles.gentoo.org/ https://mirror.bytemark.co.uk/gentoo/ https://mirrors.soeasyto.com/distfiles.gentoo.org/ https://mirrors.gethosted.online/gentoo/"
LANG="C.UTF8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LEX="flex"
MAKEOPTS="-j4 -l4"
PKGDIR="/var/cache/binpkgs"
PORTAGE_COMPRESS="xz"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
SHELL="/bin/bash"
USE="X a52 aac acl acpi activities alsa amd64 bluetooth branding bzip2 cairo cdda cdr cet crypt cups dbus declarative dri dts dvd dvdr encode exif flac gdbm gif gpm gtk gui iconv icu ipv6 jpeg kde kf6compat kwallet lcms libnotify libtirpc mad mng mp3 mp4 mpeg multilib ncurses networkmanager nls ogg opengl openmp pam pango pcre pdf pipewire plasma png policykit ppds pulseaudio qml qt5 qt6 readline screencast sdl seccomp semantic-desktop sound spell ssl startup-notification svg systemd test-rust tiff truetype udev udisks unicode upower usb vorbis vulkan wayland widgets wxwidgets x264 xattr xcb xft xml xv xvid zlib" ABI_X86="64" ADA_TARGET="gcc_12" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GUILE_SINGLE_TARGET="3-0" GUILE_TARGETS="3-0" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-2" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_12" PYTHON_TARGETS="python3_12" RUBY_TARGETS="ruby31 ruby32" VIDEO_CARDS="amdgpu fbdev intel nouveau radeon radeonsi vesa dummy" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS
Comment 1 Filip Kobierski 2024-09-18 12:28:33 UTC
Created attachment 903253 [details]
emerge --info

With this setup I am unable to reproduce bug 3 but 1-2 and 4-5 also happen to me.

I am running openrc though.
Comment 2 Filip Kobierski 2024-09-18 12:29:01 UTC
by bug I mean test failiure
Comment 3 Filip Kobierski 2024-09-18 12:34:55 UTC
Also I have opened an upstream issue for this:
https://github.com/puma/puma/issues/3489
Comment 4 Hans de Graaff gentoo-dev Security 2024-09-21 06:45:15 UTC
This has been fixed upstream but not released yet. The 6.4.3 release is a security release so it only contains the specific fix for its security issue. The patches upstream to fix this issue are large and the certificates cannot be regenerated easily, so I'll temporarily will disable these tests in the 6.4.3 release.
Comment 5 Larry the Git Cow gentoo-dev 2024-09-22 05:34:28 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=62081c0524120d1b1b4a1ab858eb84f0e9e17f9a

commit 62081c0524120d1b1b4a1ab858eb84f0e9e17f9a
Author:     Hans de Graaff <graaff@gentoo.org>
AuthorDate: 2024-09-22 05:33:18 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-09-22 05:34:19 +0000

    www-servers/puma: add 6.4.3
    
    Bug: https://bugs.gentoo.org/939950
    Closes: https://bugs.gentoo.org/939786
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 www-servers/puma/Manifest          |  1 +
 www-servers/puma/puma-6.4.3.ebuild | 83 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 84 insertions(+)