Riza Suminto has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/22569 )

Change subject: IMPALA-13790: Fix test_wildcard_san_ssl / test_wildcard_ssl
......................................................................

IMPALA-13790: Fix test_wildcard_san_ssl / test_wildcard_ssl

These tests failed in various ways depending on OS/openssl version.
An issue identified is that the certificates contained CN=* while
wildcard subject should be like *.<domain>. Recreated wildcard
certs with *.impala.test common name and added some host names
that match them in bootstrap_system.sh.

Removed the @xfail from the tests as my expectation is that they
should work on all supported OS.

Tested on
- Ubuntu 20.04 / OpenSSL 1.1.1f
- Ubuntu 22.04 / OpenSSL 3.0.2
- RHEL 7.9     / OpenSSL 1.0.2k
- RHEL 8.6     / OpenSSL 1.1.1k
- Rocky 9.2    / OpenSSL 3.2.2

Change-Id: Ieedf682d06bdb6f8f68a5f77e41175e895b77ca9
Reviewed-on: http://gerrit.cloudera.org:8080/22569
Reviewed-by: Riza Suminto <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
---
M be/src/testutil/certificates-info.txt
M be/src/testutil/wildcard-cert.pem
M be/src/testutil/wildcard-san-cert.pem
M bin/bootstrap_system.sh
M tests/custom_cluster/test_client_ssl.py
5 files changed, 89 insertions(+), 67 deletions(-)

Approvals:
  Riza Suminto: Looks good to me, approved
  Impala Public Jenkins: Verified

--
To view, visit http://gerrit.cloudera.org:8080/22569
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: Ieedf682d06bdb6f8f68a5f77e41175e895b77ca9
Gerrit-Change-Number: 22569
Gerrit-PatchSet: 9
Gerrit-Owner: Csaba Ringhofer <[email protected]>
Gerrit-Reviewer: Csaba Ringhofer <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Laszlo Gaal <[email protected]>
Gerrit-Reviewer: Riza Suminto <[email protected]>

Reply via email to