Uploaded image for project: 'CloudStack'
  1. CloudStack
  2. CLOUDSTACK-8783

MockServerTest fail on Ubuntu 12.04 if kerberos is not configured

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 4.6.0
    • 4.6.0
    • None
    • Security Level: Public (Anyone can view this level - this is the default.)
    • None

    Description

      project services/console-proxy-rdp/rdpconsole build failed in the testing on Ubuntu 12.04 with the following error message

      -------------------------------------------------------
      T E S T S
      -------------------------------------------------------
      Running common.ClientTest
      Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.144 sec - in common.ClientTest
      Running streamer.ByteBufferTest
      Tests run: 400, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.241 sec - in streamer.ByteBufferTest
      Running streamer.BaseElementTest
      Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 sec - in streamer.BaseElementTest
      Running rdpclient.MockServerTest
      Error in mock server: Received fatal alert: unexpected_message
      javax.net.ssl.SSLException: Received fatal alert: unexpected_message
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
      at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1991)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1098)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1344)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)
      at streamer.debug.MockServer.run(MockServer.java:123)
      at java.lang.Thread.run(Thread.java:745)
      Tests run: 2, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 0.478 sec <<< FAILURE! - in rdpclient.MockServerTest
      testIsMockServerCanUpgradeConnectionToSsl(rdpclient.MockServerTest) Time elapsed: 0.474 sec <<< ERROR!
      java.io.IOException: Failed to find any kerberos service ticket for host/buildbox@buildbox
      at sun.security.ssl.krb5.KerberosClientKeyExchangeImpl.getServiceTicket(KerberosClientKeyExchangeImpl.java:338)
      at sun.security.ssl.krb5.KerberosClientKeyExchangeImpl.init(KerberosClientKeyExchangeImpl.java:112)
      at sun.security.ssl.KerberosClientKeyExchange.init(KerberosClientKeyExchange.java:122)
      at sun.security.ssl.KerberosClientKeyExchange.<init>(KerberosClientKeyExchange.java:80)
      at sun.security.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:963)
      at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:345)
      at sun.security.ssl.Handshaker.processLoop(Handshaker.java:901)
      at sun.security.ssl.Handshaker.process_record(Handshaker.java:837)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1035)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1344)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)
      at rdpclient.MockServerTest.testIsMockServerCanUpgradeConnectionToSsl(MockServerTest.java:167)

      However , it succeed on CentOS 6.5

      After enabling the debug, the cipher of SSL are different on CentOS 6.X and Ubuntu 12.04.

      CentOS 6.5:
      %% Initialized: [Session-1, SSL_NULL_WITH_NULL_NULL]
      %% Negotiating: [Session-1, TLS_DH_anon_WITH_AES_256_CBC_SHA]

      Ubuntu 12.04:
      %% Initialized: [Session-1, SSL_NULL_WITH_NULL_NULL]
      %% Negotiating: [Session-1, TLS_KRB5_WITH_3DES_EDE_CBC_MD5]

      this is fixed by specifying the cipher in MockServerTest.java

      sslSocket.setEnabledCipherSuites(new String[]

      { "TLS_DH_anon_WITH_AES_256_CBC_SHA" }

      );

      Attachments

        Activity

          People

            weizhou Wei Zhou
            weizhou Wei Zhou
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: