Re: openssl 0.9.8 - ssl tests fails still report says tests passed ...

[Richard Levitte - VMS Whacker]

In message <[EMAIL PROTECTED]> on Sat, 22 Oct 2005 20:32:19 +0530, Dharmesh 
Vyas <[EMAIL PROTECTED]> said:

dharmesh.mail> I am a new user of openssl, and started exploring
dharmesh.mail> opensssl few days back. I am running the test (make
dharmesh.mail> test) and generating the report. I was analysing the
dharmesh.mail> logs generated and i have got some results that has
dharmesh.mail> clicked some doubts as follows,
dharmesh.mail> 
dharmesh.mail> (1) If I run the tests and perform 'make report', the
dharmesh.mail> output generated shows 'Test passed.' But from the
dharmesh.mail> log file i found that in the section 
dharmesh.mail> 
dharmesh.mail> test SSL protocol
[...]
dharmesh.mail> ERROR in CLIENT
dharmesh.mail> 12785:error:1407E086:SSL 
routines:SSL2_SET_CERTIFICATE:certificate verify failed:s2_clnt.c:1066:
dharmesh.mail> SSLv2, cipher (NONE) (NONE)
dharmesh.mail> 1 handshakes of 256 bytes done,
dharmesh.mail> 
dharmesh.mail> and there are a few of this types which shows the same
dharmesh.mail> ERROR in CLIENT,

This is correct.  The test checks that all aspects of using SSL,
*including* a correct check of certificates (which includes saying
when there's a verification failure), is done properly.  The error
above proves that the software works as it should, even for certicates
that fail to verify.  That's why this test is a success.

dharmesh.mail> (2) Except ssltest.c if i edit any .c files in tests
dharmesh.mail> foder with some wrong value and perform the test
dharmesh.mail> and generate the report (by make report) it shows
dharmesh.mail> as "Failure" and stops performing any other
dharmesh.mail> tests. But if i edit anything in ssltest.c and
dharmesh.mail> perform the test, the logs and report says that
dharmesh.mail> 'Test Passed' and there will be some errors same
dharmesh.mail> like i showed in (1). So is it something like pass
dharmesh.mail> and failure of Tests doesnot depend on the
dharmesh.mail> ssltest.c.

What, exactly, did you change in ssltest.c?

Cheers,
Richard

-- 
Richard Levitte [EMAIL PROTECTED]
http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
-- C.S. Lewis
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   [EMAIL PROTECTED]

Re: openssl 0.9.8 - ssl tests fails still report says tests passed ...

[Goetz Babin-Ebell]

Dharmesh Vyas wrote:

Hello Group...

Hello Dharmesh Vyas,

(1) If I run the tests and perform 'make report', the output generated 
shows 'Test passed.' But from the log file i found that in the section


[...]


and there are a few of this types which shows the same ERROR in CLIENT,

Is this error fine?? Since as per what i have got from other users is 
that if any of the tests of openssl test fails it stops performing other 
tests and shows '[test] Error'. But all tests gets performed and the the 
report says that tests passed . So does that mean that my openssl is 
properly not installed or it means that some thing is wrong with the 
configuration of the tool.


Without looking in the test cases myself:

Especially in security environments tests aren't done without
performing some test that must fail (expected fails),,,

Bye

Goetz

--
DMCA: The greed of the few outweighs the freedom of the many


smime.p7s
Description: S/MIME Cryptographic Signature