464702 - Operation timed out in cert chains tests.

Status: RESOLVED DUPLICATE of bug 470479

(NSS :: Tools, defect)

Description

[Slavomir Katuscak]

Occured on: dositups SunOS/i386 32bit OPT on 2008/11/13 03:45:34 (Tinderbox)

chains.sh: Verifying certificate(s)  EE1CA1.der CA1Bridge.der with flags -d EE1DB -f   -t Army.der
vfychain -d EE1DB -pp -vv -f   EE1CA1.der CA1Bridge.der  -t Army.der
Chain is bad, -5990 = I/O operation timed out.
PROBLEM WITH THE CERT CHAIN:
CERT 2. CN=CA1 Intermediate,O=CA1,C=US [Certificate Authority]:
  ERROR -5990: I/O operation timed out.
chains.sh: #6911: BridgeWithAIA: Verifying certificate(s)  EE1CA1.der CA1Bridge.der with flags -d EE1DB -f   -t Army.der - FAILED

There was some I/O time out, not sure if in work with local files or fetching cert via HTTP protocol.

For now this is one time problem, if it repeats I will add comments there.

Comment 1

[Slavomir Katuscak]

Occured on: aquash SunOS/i386 32bit DBG on 2008/11/20 05:01:20 (Tinderbox)

chains.sh: Verifying certificate(s)  EE1CA1.der CA1Bridge.der with flags -d EE1DB -f   -t Navy.der
vfychain -d EE1DB -pp -vv -f   EE1CA1.der CA1Bridge.der  -t Navy.der
chains.sh: -------- Running /export/tinderlight/data/aquash_32_DBG/mozilla/dist/SunOS5.9_i86pc_DBG.OBJ/bin/vfychain under DBX:
/usr/dist/pkgs/sunstudio_i386,v11.0/SUNWspro/prod/bin/dbx /export/tinderlight/data/aquash_32_DBG/mozilla/dist/SunOS5.9_i86pc_DBG.OBJ/bin/vfychain
chains.sh: -------- DBX commands:
dbxenv follow_fork_mode parent
dbxenv rtc_mel_at_exit verbose
dbxenv rtc_biu_at_exit verbose
check -memuse -match 16 -frames 16
run -d EE1DB -pp -vv -f EE1CA1.der CA1Bridge.der -t Navy.der

Chain is bad, -5990 = I/O operation timed out.
PROBLEM WITH THE CERT CHAIN:
CERT 2. CN=CA1 Intermediate,O=CA1,C=US [Certificate Authority]:
  ERROR -5990: I/O operation timed out.
execution completed, exit code is 1
chains.sh: #1049: BridgeWithAIA: Verifying certificate(s)  EE1CA1.der CA1Bridge.der with flags -d EE1DB -f   -t Navy.der - FAILED

The same problem, this is second detected occurance, both occured in case where certificate should be fetched. Seems that it is temporary problem with HTTP server used in AIA tests.

Alexei, what is timeout for cert fetching ? Is it possible to try to fetch it more times, if first try is not successfull ?

Comment 2

[Slavomir Katuscak]

Sometimes I see very similar failure:

run -d UserDB -pp -vv -f UserCA2.der CA2CA1.der -t Root.der
Chain is bad, -8030 = Server returned bad HTTP response
PROBLEM WITH THE CERT CHAIN:
CERT 2. CN=CA2 Intermediate,O=CA2,C=US [Certificate Authority]:
  ERROR -8030: Server returned bad HTTP response
execution completed, exit code is 1

Problem is again in HTTP communication when fetching cert.