170401 - certutil test failures on Win NT opt 9/23/2002 nightly build

Status: RESOLVED INVALID

(NSS :: Libraries, defect)

Description

[Bishakha Banerjee]

Nightly QA at Netscape on 9/23on a WIn NT machine, OPT build, had failures in
the following tests:
Initializing FIPS PUB 140-1 Test Certificate's Cert DB (127)
Generate Certificate for FIPS PUB 140-1 Test Certificate (255)

Errors reported are:
elgamal.2 Initializing FIPS PUB 140-1 Test Certificate's Cert DB (127) Failed
elgamal.2 Generate Certificate for FIPS PUB 140-1 Test Certificate (255) Failed
elgamal.2 11 Fatal - S/MIME of cert.sh needs to pass first Failed
elgamal.2 15 Fatal - S/MIME of cert.sh needs to pass first Failed
elgamal.2 15 Fatal - FIPS of cert.sh needs to pass first Failed
elgamal.2/output.log-cipher.sh: MD2 Hash --------------------------------
elgamal.2/output.log-bltest -T -m md2 -H -d .
elgamal.2/output.log-Hash self-test for md2 passed.
elgamal.2/output.log-cipher.sh: MD5 Hash --------------------------------
elgamal.2/output.log-bltest -T -m md5 -H -d .
elgamal.2/output.log-Hash self-test for md5 passed.
elgamal.2/output.log-cipher.sh: SHA1 Hash --------------------------------
elgamal.2/output.log-bltest -T -m sha1 -H -d .
elgamal.2/output.log-Hash self-test for sha1 passed.
elgamal.2/output.log-smime.sh: S/MIME Tests ===============================
elgamal.2/output.log:smime.sh: Exit: 11 Fatal - S/MIME of cert.sh needs to pass
first
elgamal.2/output.log-RSAPERF: WINNT4.0_OPT.OBJ 300 iterations in 5.063 s one
operation every 16876 us
elgamal.2/output.log-tools.sh: Tools Tests ===============================
elgamal.2/output.log:tools.sh: Exit: 15 Fatal - S/MIME of cert.sh needs to pass
first
elgamal.2/output.log-kill: Exit 76: tools_init 57: ./tools.sh 182: .: all.sh 98:
44: no such process
elgamal.2/output.log-fips.sh: FIPS 140-1 Compliance Tests
===============================
elgamal.2/output.log:fips.sh: Exit: 15 Fatal - FIPS of cert.sh needs to pass first
elgamal.2/output.log-kill: Exit 76: fips_init 53: ./fips.sh 182: .: all.sh 98:
44: no such process
elgamal.2/output.log-dbtests.sh: CERT and Key DB Tests

Comment 1

[Bishakha Banerjee]

Attachment: results.html

Comment 2

[Bishakha Banerjee]

Attachment: output log

Comment 3

[Sonja Mirtitsch]

The last lines of the output log of cert.sh, including "cert.sh SUCCESS: SMIME
passed" are missing. Also, obviously the marker string "SUCCESS: SMIME passed"
was not written to cert.log, that's why the SMIME tests didn't even start. The
reported errors are all due to the certificates not having been created.

Without the lines in the log why the fips certs failed it would be hard to
debug, but I assume that cause they failed was the same that it didn't write to
the logs, maybe there is something weird on your NT machine, it had the problem
that it couldn't find tstclnt 2 days ago, maybe the filesystem is full or
hanging processes...?

The end of the output log of cert.sh should look something like:

cert.sh: Importing Certificates ==============================
cert.sh: Import Alices's cert into Bob's db --------------------------
certutil -E -t p,p,p -d ../bobdir -f ../tests.pw.229 -i ../alicedir/Alice.cert
cert.sh: Import Bob's cert into Alice's db --------------------------
certutil -E -t p,p,p -d ../alicedir -f ../tests.pw.229 -i ../bobdir/Bob.cert
cert.sh: Import Dave's cert into Alice's DB --------------------------
certutil -E -t p,p,p -d ../alicedir -f ../tests.pw.229 -i ../dave/Dave.cert
cert.sh: Import Dave's cert into Bob's DB --------------------------
certutil -E -t p,p,p -d ../bobdir -f ../tests.pw.229 -i ../dave/Dave.cert
cert.sh SUCCESS: SMIME passed
cert.sh: Creating FIPS 140-1 DSA Certificates ==============
cert.sh: Initializing FIPS PUB 140-1 Test Certificate's Cert DB
--------------------------
certutil -N -d . -f ../tests.fipspw.229
cert.sh: Enable FIPS mode on database -----------------------

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type 
'q <enter>' to abort, or <enter> to continue: 
Using database directory ....
FIPS mode enabled.
cert.sh: Generate Certificate for FIPS PUB 140-1 Test Certificate
--------------------------
certutil -s "CN=FIPS PUB 140-1 Test Certificate, E=[e-mail], O=BOGUS NSS,
OU=FIPS PUB 140-1, L=Mountain View, ST=California, C=US" -S -n
FIPS_PUB_140-1_Test_Certificate -x -t Cu,Cu,Cu -d . -f ../tests.fipspw.229 -k
dsa -m 1000 -z ../tests_noise.229


Generating key.  This may take a few moments...

cert.sh SUCCESS: FIPS passed
cert.sh cert.sh: finished cert.sh
ssl.sh: SSL tests ===============================

Comment 4

[Wan-Teh Chang]

Thank you for looking at this bug, Sonja.
I'm going to assume that these failures were
caused by some unknown problem with the test
machine and mark this bug INVALID.

Comment 5

[Bishakha Banerjee]

I am able to verify this as network problems now.

I was in the lab today and observed sporadic network problems firsthand. 

Anthony and IC have confirmed that akroyd (where our NT builds are written to,
and where sbstools resides and our nightly QA scripts run from) has been up and
down yesterday and today. Sporadic failures also occurred in the week this
failure was observed.

I will update bug 170142 as well, those were also caused by network problems.