Uploaded image for project: 'Red Hat Data Grid'
  1. Red Hat Data Grid
  2. JDG-799

simple-tls-client-auth and simple-tls-sni-client-auth failures on Windows

    XMLWordPrintable

Details

    Description

      Both of these tests fail on WIndows. I have verified that the truststore_client.p12 keystore includes the certificate and the private key. The failure also happens if the certificate is imported into the MMC as well as when the certificate is not imported in MMC.

      jdg@jdg-PC ~/projects/jboss-datagrid-7.1.0-server/standalone/configuration
      $ openssl.exe pkcs12 -info -in truststore_client.p12
      Enter Import Password:
      MAC Iteration 2048
      MAC verified OK
      PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048
      Certificate bag
      Bag Attributes
      localKeyID: 7C 54 C6 BD C5 DA 6B 9F 0F D4 DB BC F6 99 D6 3A DA 1C 50 CA
      subject=/C=it/ST=mi/L=milan/O=hat/OU=red/CN=clientzilla
      issuer=/C=it/ST=mi/L=milan/O=hat/OU=red/CN=clientzilla
      -----BEGIN CERTIFICATE-----
      MIIDVzCCAj+gAwIBAgIERNkHRjANBgkqhkiG9w0BAQsFADBcMQswCQYDVQQGEwJp
      dDELMAkGA1UECBMCbWkxDjAMBgNVBAcTBW1pbGFuMQwwCgYDVQQKEwNoYXQxDDAK
      BgNVBAsTA3JlZDEUMBIGA1UEAxMLY2xpZW50emlsbGEwHhcNMTcwMTE4MTczMjQz
      WhcNMTcwNDE4MTczMjQzWjBcMQswCQYDVQQGEwJpdDELMAkGA1UECBMCbWkxDjAM
      BgNVBAcTBW1pbGFuMQwwCgYDVQQKEwNoYXQxDDAKBgNVBAsTA3JlZDEUMBIGA1UE
      AxMLY2xpZW50emlsbGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM
      uupRTZX52zM21xt/3X3JhPtjtV5k4Ua+t/KFMOa0GERyJfzYFvgaKPUQWmNCkfK+
      oflG8IeNhoPl+axvWckGb9Hy78M/BPyj19h96q09KpgRtPzl7QPhQUigFe7a+k6k
      b+unH+21bv1Xu3btN36Q/hTMHziq+EgYSuuWhDau2NQ2xgCSrJdMOox84BPaI8Rq
      RQhL9Ob3Q5vCZS936NABYkBstSIMx+w9gsP6aLh+99okBa30EY9hriP8hPJ3UfIL
      /0ZcamCxhFOtp3NZlI5WNz+7Gxt0Z1JtGF86fXIj65qntLDC+J2E8/6imUTA7G0K
      LDbgngGga2VmIYtckCnLAgMBAAGjITAfMB0GA1UdDgQWBBTOFmnZVt304ZpmU2Ny
      eTpalYJLZDANBgkqhkiG9w0BAQsFAAOCAQEAVquQQWQpjz4ISWdMkdHHi5zN0MzB
      75PbxUKcGRx9f63sIGYlCEQ0n/GTW9ycgeF0FPxAmTxozU3G+f+cA36TRyXRzqpa
      prSjWi2acfOydiI3msPohMbOkllqvmPez3sRbU8UTLL3jQX068qteLLwy0zs8plg
      SRCdD87cukOjQ3PNox/88FUTAr+zVMSWfxsJ7miOxYbOFy1CVTWLpha57vP5FmA/
      TkXMo3O+GLdWqWHiTDZjR84YWg9xco5NXQCETwz/LajSos2Sl2eqWAkOp7QljXs9
      pu8UrmGJTO1S0Ipp5MzkmZpWx2T6E7c9zzdMzKjxjuM9f5ZEXR3tMzovvA==
      -----END CERTIFICATE-----
      PKCS7 Data
      Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
      Bag Attributes
      localKeyID: 7C 54 C6 BD C5 DA 6B 9F 0F D4 DB BC F6 99 D6 3A DA 1C 50 CA
      Key Attributes: <No Attributes>
      Enter PEM pass phrase:
      Verifying - Enter PEM pass phrase:
      -----BEGIN ENCRYPTED PRIVATE KEY-----
      MIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIMd7Z/p/MghYCAggA
      MBQGCCqGSIb3DQMHBAgPNfPPNkRFBQSCBMiBm661OQoHX6ZKv23SpvbwD4wszESQ
      Uz9tyKTPEQtgNkfhzYy1A9n065sKA+853h3lfF3LZW8uvopPqmKEPzmiFk9Ctxp0
      745lv57lbbGVG8DXaK2MdhAvQlap4AjwO5zmiS7pbny78Au0XQHaPPtHv4zNngoZ
      0kuD3+LaFlNIL5WU4pIRkKF7Ng8gAVb/sjCI7UbuuTR+ll/6y533c8PcGyoc8GBH
      t3hBNEqYzE/D2U8dzkuOIEASiQrAchYIIJKxNDlABdE+RwDhRg+/Yt9dVHbB8INQ
      IfI9bm5eckKs5kLmnrWOcDgOaSah+AxuzDnHjwS1+UKKjnnm09yjjkxGi7WXCPdn
      T/F+7DPuvjj1SwmH8g6n+uN93fff2eTGU+fEKZo0JWH0UyBWSfAq9ssoCTroMr97
      ehpftc6ATsEWPyHFdaKYXCPSLWclF4aSPgxUfd7B6VueMepJdHw1pTD5SqIA+cyA
      aWdkSi6oknLLOdwfPDE49bKkaj8EZNagjsu+4CULdL7dPJNn1A1xLO7Dr96Zms2m
      c2neQIqr+NPPvF8Bx1O8JIqS8tjHkPHVDfxoseQJl2sskCIIP3+7mFqgHpu7gEym
      rZwb0egbz25nEBywM3gFAVHiyfzVXVl6YlCrajncpqpbTLU57PD2YATP3Rt+LKV5
      PxGAX8rjxZWZQ1lvy3Uqqo5I+YCEEgdG2UY38Ty1wTBU9OO5tfV8gUylPE0FsoWM
      3F8cPMJn1ZZke8MDxo2uGHJWmD04VqUXIpnghjFAPcL/Mk+zvz4HKgsXEHIrnL3r
      FRq2Bdseoz7GAQ2eX4S1oNi6x1vaIciUHqI9EC4bqAB2RY81tJjsdXWGXZy1Kjvk
      C0gw7jI1ZweJMBTvLhZoEaqHfSxbCqZw/NGqB9248o3sjsnvV8VioewmLCKnSM4t
      HVawyy39tsiUv3KRnsDZuKaXyzXzAAPISRgwMg0jv0gEM+kfb9AdLgb2PETnG2wL
      Wq6bK45aju0Kd9VYfcsdOKDzITeGf5qiDDKZuUBSwA9UBOOyypoTg3PcRF4O/4Fn
      ZtDemjIIjlPGcHvxqzB9fjQw4k508M2oRPd55+vfcq9dHRCSd3eUw2/MJxaDz5bn
      nGOR5EP17avhrpWSdhHJVZ+9k61AfTswUO0zwjOw4AUscmtiocK4CHRGKbCq8eiQ
      Ph8COcd1olt1uX0Tb2cgWBz1l/lVVRi3xoO21Oqg67Cg/5+kmHNGgM9wtspcKpil
      9B8XqVZcx9OnL2aWcMEOYUWABaUT31tbgtOMPINbvECvWGmKPY/lBYag5eJoN1Ge
      QNj5L9yDXqL0HlqM/vFBw3OLEh2OKXPQo000cIahU2+Id1SaZtrRP+nFjTilXV3E
      HfnMEfdkQaTDrXKLK9rHMO3p6ANd9KDP6qZReX0u+SlET1VvFOaw5H2lMx+dI1R+
      g+M7KOdg/pJKtBHa5Ami3FsBMLyDxmJgyZ97HCWp9zLW2dzF8kUvMOXjE51kczJM
      MgtovB4Gv9akCpcffi83K6Fyo5Yz4NMEKB8wdqMaLHtz6fb4kvcKI++LDBz/Z2iH
      IkeGCRj6Rj29Nd7KxqKgT6PBbAV2beyxjGF3u3MpIsMIZHMtQCsALUf2HFMZM9QM
      S+Y=
      -----END ENCRYPTED PRIVATE KEY-----
      

      Logs from the test failures:

      19: Test command: C:\Users\jdg\projects\jboss-datagrid-7.1.0-remote-cpp-client-Source\build\RelWithDebInfo\simple-tls.exe "C:/Users/jdg/projects/jboss-datagrid-7.1.0-remote-cpp-client-Source/test/data/infinispan-ca.pem" "C:/Users/jdg/projects/jboss-datagrid-7.1.0-remote-cpp-client-Source/test/data/truststore_client.p12"
      19: Test timeout computed to be: 1500
      19: TLS Test
      19: Using supplied client certificate
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: ERROR [TcpTransportFactory.cpp:264] Initial ping has thrown an exception when pinging 127.0.0.1:11222 : ERROR
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      19: ERROR [hotrod/impl/operations/RetryOnFailureOperation.h:81] Exception encountered, retry 9 of 10: ERROR
      19/22 Test #19: simple-tls-client-auth ...........***Failed    0.22 sec
      test 20
            Start 20: simple-tls-sni-client-auth
      
      20: Test command: C:\Users\jdg\projects\jboss-datagrid-7.1.0-remote-cpp-client-Source\build\RelWithDebInfo\simple-tls-sni.exe "C:/Users/jdg/projects/jboss-datagrid-7.1.0-remote-cpp-client-Source/test/data/keystore_server_cert.pem" "C:/Users/jdg/projects/jboss-datagrid-7.1.0-remote-cpp-client-Source/test/data/truststore_client.p12"
      20: Test timeout computed to be: 1500
      20: TLS-SNI Test (First correct name and cert)
      20: Using supplied client certificate
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: ERROR [TcpTransportFactory.cpp:264] Initial ping has thrown an exception when pinging 127.0.0.1:11222 : ERROR
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: **** Error 0x80092004 returned by CertCreateCertificateContext. Cannot create certificate. File corrupted?
      20: ERROR [hotrod/impl/operations/RetryOnFailureOperation.h:81] Exception encountered, retry 9 of 10: ERROR
      20: FAIL: not connected with correct SNI
      20/22 Test #20: simple-tls-sni-client-auth .......***Failed    1.06 sec
      

      Attachments

        Issue Links

          Activity

            People

              vrigamon@redhat.com Vittorio Rigamonti
              rhn-support-afield Alan Field
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: