Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-3171

Untrusted SSL certificate used for client authentication leads to Broken pipe IOException intermittently

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 3.0.0.Beta31
    • 3.0.0.Beta30
    • Security, Test Suite
    • None

    Description

      Untrusted SSL certificate used for authentication leads to "IOException: Broken pipe" intermittently.

      Description of problem:
      ExternalMgmtSaslTestCase from wf-core fails intermittently (80%) on pure-ipv6 RHEL6 machines.
      The test configures two-way-SSL and try to use untrusted client certificate. IOException comes and the test checks if the cause is an SSLException (which is expected), but in some cases "IOException: Broken pipe" comes as the cause instead.

      How reproducible:
      80% on pure-ipv6 RHEL6 machines

      Steps to Reproduce:

      cd testsuite/elytron
      export PROXY_PARAMS="-DproxySet=true -DproxyHost=proxy-01-ipv6.mw.lab.eng.bos.redhat.com -DproxyPort=3128 -Dhttp.proxyHost=proxy-01-ipv6.mw.lab.eng.bos.redhat.com -Dhttp.proxyPort=3128 -Dhttps.proxyHost=proxy-01-ipv6.mw.lab.eng.bos.redhat.com -Dhttps.proxyPort=3128"
      mvn install -B  -fae -llr -Dipv6 $PROXY_PARAMS  -Dts.timeout.factor=300 -Dtimeout.factor=300 -Dtest=ExternalMgmtSaslTestCase
      

      Failing test is testUntrustedCertFails, but looks like not reproducible without running whole testcase.

      Actual results:
      StackTrace:

      17:03:12 java.lang.AssertionError: SSLException was expected as the second cause when certificate authentication fails
      17:03:12 Expected: is an instance of javax.net.ssl.SSLException
      17:03:12      but: <java.io.IOException: Broken pipe> is a java.io.IOException
      17:03:12 	at org.hamcrest.MatcherAssert.assertThat(MatcherAssert.java:20)
      17:03:12 	at org.junit.Assert.assertThat(Assert.java:956)
      17:03:12 	at org.wildfly.test.integration.elytron.sasl.mgmt.ExternalMgmtSaslTestCase.assertCertAuthenticationFails(ExternalMgmtSaslTestCase.java:216)
      17:03:12 	at org.wildfly.test.integration.elytron.sasl.mgmt.ExternalMgmtSaslTestCase.lambda$testUntrustedCertFails$3(ExternalMgmtSaslTestCase.java:201)
      

      Standard output:

      [0m15:03:10,908 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0050: WildFly Core 3.0.0.Beta30-redhat-1 "Kenny" stopped in 39ms
      [0m[0m15:03:10,910 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly Core 3.0.0.Beta30-redhat-1 "Kenny" starting
      [0m[0m15:03:11,057 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
      [0m[33m15:03:11,132 WARN  [org.jboss.as.domain.http.api.undertow] (MSC service thread 1-1) WFLYDMHTTP0003: Unable to load console module for slot main, disabling console
      [0m[0m15:03:11,146 INFO  [org.jboss.as.patching] (MSC service thread 1-4) WFLYPAT0050: WildFly cumulative patch ID is: base, one-off patches include: none
      [0m[33m15:03:11,147 WARN  [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111: Keystore /mnt/hudson_workspace/eap-7x-as-testsuite-test-core-rhel-ipv6-broken-pipe/7a0f50f2/testsuite/elytron/target/wildfly-core/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
      [0m[0m15:03:11,252 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
      [0m[0m15:03:11,256 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://[::1]:9990/management
      [0m[0m15:03:11,256 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://[::1]:9990
      [0m[0m15:03:11,260 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Core 3.0.0.Beta30-redhat-1 "Kenny" started in 345ms - Started 83 of 86 services (17 services are lazy, passive or on-demand)
      [0m[0m15:03:11,369 INFO  [org.jboss.as.server] (management-handler-thread - 3) WFLYSRV0236: Suspending server with no timeout.
      [0m[0m15:03:11,399 INFO  [org.jboss.as.server] (Management Triggered Shutdown) WFLYSRV0241: Shutting down in response to management operation 'shutdown'
      [0m[0m15:03:11,474 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0050: WildFly Core 3.0.0.Beta30-redhat-1 "Kenny" stopped in 45ms
      [0m
      

      Attachments

        Issue Links

          Activity

            People

              jkalina@redhat.com Jan Kalina (Inactive)
              jkalina@redhat.com Jan Kalina (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: