316629 - SSLSocketException failures

Status: RESOLVED FIXED

(JSS Graveyard :: Tests, defect)

Description

[Jason Reid]

20051115 securitytip run had the following new failures:
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL


All are of the form:
============= Start JSSE server tests to test the bypass
============= Start JSS client tests in bypassPKCS11 mode
using port: 2876
mode type SSLv3false
keystoreLocLinux2.4_x86_glibc_PTH_DBG.OBJ
using port: 2876
main: jss library loaded
***FilePasswordCallback returns netscape
Unable to connect: (-5961) TCP connection reset by peer.
org.mozilla.jss.ssl.SSLSocketException: Unable to connect: (-5961) TCP connection reset by peer.
        at org.mozilla.jss.ssl.SSLSocket.socketConnect(Native Method)
        at org.mozilla.jss.ssl.SSLSocket.<init>(SSLSocket.java:259)
        at org.mozilla.jss.ssl.SSLSocket.<init>(SSLSocket.java:230)
        at org.mozilla.jss.tests.JSS_SSLClient.doIt(JSS_SSLClient.java:221)
        at org.mozilla.jss.tests.JSS_SSLClient.main(JSS_SSLClient.java:447)
JSS client in bypassPKCS11 mode returned 1
JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL

I checked after the fact and no other processes appeared on the machine.
nssamdrhel4 passed on these tests. JSS version is 4.2.

Comment 1

[Jason Reid]

More hits on 20051116 securitytip:
mintchip-SunOS5.8_DBG:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL

From mintchip log:
============= Start JSSE server tests
============= Start JSS client tests
using port: 2876
using port: 2876
mode type SSLv3false
keystoreLocSunOS5.8_DBG.OBJ
main: jss library loaded
***FilePasswordCallback returns netscape
Unable to connect: (-5981) Connection refused by peer.
org.mozilla.jss.ssl.SSLSocketException: Unable to connect: (-5981) Connection refused by peer.
        at org.mozilla.jss.ssl.SSLSocket.socketConnect(Native Method)
        at org.mozilla.jss.ssl.SSLSocket.<init>(SSLSocket.java:259)
        at org.mozilla.jss.ssl.SSLSocket.<init>(SSLSocket.java:230)
        at org.mozilla.jss.tests.JSS_SSLClient.doIt(JSS_SSLClient.java:221)
        at org.mozilla.jss.tests.JSS_SSLClient.main(JSS_SSLClient.java:447)
*** Using J2SE 1.4.x ***
JSS client returned 1
JSSTEST_CASE 13 (JSSE server / JSS client): FAIL

Comment 2

[Jason Reid]

20051117 securitytip run had the following hits:
mintchip-SunOS5.8_DBG:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 13 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL

Comment 3

[Jason Reid]

Additional hits on 20051118 (numbering has changed)

mintchip-SunOS5.8_64_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
mintchip-SunOS5.8_64_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
mintchip-SunOS5.8_64_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
mintchip-SunOS5.8_64_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel4-Linux2.6_x86_glibc_PTH_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
charm-HP-UXB.11.11_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
hbombaix-AIX5.1_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
hbombaix-AIX5.1_DBG:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
hbombaix-AIX5.1_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
hbombaix-AIX5.1_OPT:JSSTEST_CASE 18 (JSSE server / JSS client in bypassPKCS11 mode): FAIL

No results from 20051119 and 20051120 due to a build machine failure. Results were suspect.

Failures from 20051121 (again new numbering.)
charm-HP-UXB.11.11_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
mintchip-SunOS5.8_64_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
mintchip-SunOS5.8_64_DBG:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
mintchip-SunOS5.8_64_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
mintchip-SunOS5.8_64_OPT:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
mintchip-SunOS5.8_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_DBG:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
nssamdrhel3-Linux2.4_x86_glibc_PTH_OPT:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
hbombaix-AIX5.1_DBG:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
hbombaix-AIX5.1_DBG:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL
hbombaix-AIX5.1_OPT:JSSTEST_CASE 14 (JSSE server / JSS client): FAIL
hbombaix-AIX5.1_OPT:JSSTEST_CASE 20 (JSSE server / JSS client in bypassPKCS11 mode): FAIL

Comment 4

[Jason Reid]

The previous mentioned failures were for the securitytip.

Comment 5

[Sandeep Konchady]

The same behaviour is also seen in JSS 4.1.x tests. The most common cause of this failure - "Unable to connect: (-5961) TCP connection reset by peer" is when the server has shutdown or has not been started. So it looks like the JSSE_SSLServer times out before JSS_SSLClient comes up.

One of the possible solution is to increase the server socket timeout from 15 sec to 30 sec. The other solution is to not set timeout for the server and to kill any java processes at the end of the test. This assumption is valid only for dedicated tests machines that do not run any other java processes. My preference would be to go with the first choice.

Comment 6

[Sandeep Konchady]

Attachment: Increased the SSLServerSocket timeout to 90 sec

I increased the SSLServerSocket.timeout from 15 sec to 90 sec. This is fine because we used different ports for JSSE server and JSS servers. The same diff holds good for JSS 4.1.x and 4.2.x branches. Once approved I will check in the same code to both the branches.

Comment 7

[Sandeep Konchady]

Checking in code for JSS 4.1.x branch

Checking in org/mozilla/jss/tests/JSSE_SSLServer.java;
/cvsroot/mozilla/security/jss/org/mozilla/jss/tests/JSSE_SSLServer.java,v  <--  JSSE_SSLServer.java
new revision: 1.4.2.2; previous revision: 1.4.2.1
done


Checking in code for JSS 4.2.x branch

Checking in org/mozilla/jss/tests/JSSE_SSLServer.java;
/cvsroot/mozilla/security/jss/org/mozilla/jss/tests/JSSE_SSLServer.java,v  <--  JSSE_SSLServer.java
new revision: 1.6; previous revision: 1.5
done