mysql-5.5 fails to build in trusty-updates and trusty-security (outdated certificates)

[Matthias Klose]

seen in a test rebuild with an updated toolchain, and verified in a clean trusty chroot. the next security update for mysql-5.5 will fail.

https://launchpad.net/ubuntu/+archive/test-rebuild-20150317-security/+build/7070395
https://launchpad.net/ubuntu/+archive/test-rebuild-20150317-security/+build/7070392

notifying ubuntu-server and ubuntu-security.

        Test ended at 2015-03-18 17:53:22

CURRENT_TEST: main.ssl_8k_key
mysqltest: At line 5: command "$MYSQL --ssl --ssl-key=$MYSQL_TEST_DIR/std_data/client-key.pem --ssl-cert=$MYSQL_TEST_DIR/std_data/client-cert.pem -e "SHOW STATUS LIKE 'ssl_Cipher'" 2>&1" failed

Output from before failure:
ERROR 2026 (HY000): SSL connection error: ASN: after date in the past
exec of '/home/packages/tmp/mysql-5.5-5.5.41/builddir/client//mysql --defaults-file=/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/var/my.cnf --ssl --ssl-key=/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/std_data/client-key.pem --ssl-cert=/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/std_data/client-cert.pem -e "SHOW STATUS LIKE 'ssl_Cipher'" 2>&1' failed, error: 256, status: 1, errno: 0

 - saving '/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/var/log/main.ssl_8k_key/' to '/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/var/log/main.ssl_8k_key/'
The servers were restarted 319 times
Spent 1363.780 of 4693 seconds executing testcases
mysql-test-run: WARNING: Got errors/warnings while running tests, please examine '/home/packages/tmp/mysql-5.5-5.5.41/builddir/mysql-test/var/log/warnings' for details.

Too many failed: Failed 10/743 tests, 98.65% were successful.

Failing test(s): rpl.rpl_heartbeat_ssl rpl.rpl_ssl rpl.rpl_ssl1 main.ssl_8k_key

The log files in var/log may give you some hint of what went wrong.

If you want to report this error, please read first the documentation
at http://dev.mysql.com/doc/mysql/en/mysql-test-suite.html

453 tests were skipped, 15 by the test itself.

Too many tests(10) failed! Terminating...
mysql-test-run: *** ERROR: Test suite aborted

[Norvald H. Ryeng (nryeng)]

On Wed, 18 Mar 2015 21:50:02 +0100, Matthias Klose <email address hidden> wrote:

> Public bug reported:
>
> seen in a test rebuild with an updated toolchain, and verified in a
> clean trusty chroot. the next security update for mysql-5.5 will fail.
>
> https://launchpad.net/ubuntu/+archive/test-rebuild-20150317-security/+build/7070395
> https://launchpad.net/ubuntu/+archive/test-rebuild-20150317-security/+build/7070392
>
> notifying ubuntu-server and ubuntu-security.

An upgrade to 5.5.42 (released 2015-02-02) will fix the expired SSL cert
in the test suite.

Regards,

Norvald H. Ryeng

[Robie Basak (racb)]

This might be the same fix required here: http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/vivid/percona-server-5.6/vivid/view/head:/debian/patches/fix_mtr_ssl_cert.patch

Invalid in the development release since mysql-5.5 has been removed from Vivid. Trusty could have the update when next needed though.

[Mathew Hodson (mhodson)]

This was fixed with https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.43-0ubuntu0.14.04.1