Skip to content

Conversation

blink1073
Copy link
Member

No description provided.

@ShaneHarvey
Copy link
Member

These failures are not new, they seem to have started a long time ago:

 [2024/09/17 17:08:34.322] self = <test.asynchronous.test_encryption.TestKmsTLSOptions testMethod=test_01_aws>
 [2024/09/17 17:08:34.322]     async def test_01_aws(self):
 [2024/09/17 17:08:34.322]         key = {
 [2024/09/17 17:08:34.322]             "region": "us-east-1",
 [2024/09/17 17:08:34.322]             "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0",
 [2024/09/17 17:08:34.322]             "endpoint": "127.0.0.1:9002",
 [2024/09/17 17:08:34.322]         }
 [2024/09/17 17:08:34.322]         with self.assertRaisesRegex(EncryptionError, self.cert_error):
 [2024/09/17 17:08:34.322]             await self.client_encryption_no_client_cert.create_data_key("aws", key)
 [2024/09/17 17:08:34.322]         # "parse error" here means that the TLS handshake succeeded.
 [2024/09/17 17:08:34.322]         with self.assertRaisesRegex(EncryptionError, "parse error"):
 [2024/09/17 17:08:34.322]             await self.client_encryption_with_tls.create_data_key("aws", key)
 [2024/09/17 17:08:34.322]         # Some examples:
 [2024/09/17 17:08:34.322]         # certificate verify failed: certificate has expired (_ssl.c:1129)
 [2024/09/17 17:08:34.322]         # amazon1-2018 Python 3.6: certificate verify failed (_ssl.c:852)
 [2024/09/17 17:08:34.322]         key["endpoint"] = "127.0.0.1:9000"
 [2024/09/17 17:08:34.322]         with self.assertRaisesRegex(EncryptionError, "expired|certificate verify failed"):
 [2024/09/17 17:08:34.322]             await self.client_encryption_expired.create_data_key("aws", key)
 [2024/09/17 17:08:34.322]         # Some examples:
 [2024/09/17 17:08:34.322]         # certificate verify failed: IP address mismatch, certificate is not valid for '127.0.0.1'. (_ssl.c:1129)"
 [2024/09/17 17:08:34.322]         # hostname '127.0.0.1' doesn't match 'wronghost.com'
 [2024/09/17 17:08:34.322]         # 127.0.0.1:9001: ('Certificate does not contain any `subjectAltName`s.',)
 [2024/09/17 17:08:34.322]         key["endpoint"] = "127.0.0.1:9001"
 [2024/09/17 17:08:34.322] >       with self.assertRaisesRegex(
 [2024/09/17 17:08:34.322]             EncryptionError, "IP address mismatch|wronghost|IPAddressMismatch|Certificate"
 [2024/09/17 17:08:34.322]         ):
 [2024/09/17 17:08:34.322] E       AssertionError: "IP address mismatch|wronghost|IPAddressMismatch|Certificate" does not match "SSL handshake failed: 127.0.0.1:9001: timed out (configured timeouts: socketTimeoutMS: 20000.0ms, connectTimeoutMS: 20000.0ms)"

@blink1073 blink1073 merged commit 6d472a1 into mongodb:master Sep 18, 2024
36 of 39 checks passed
@blink1073 blink1073 deleted the PYTHON-4738 branch September 18, 2024 01:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants