-
Type:
Build Failure
-
Resolution: Fixed
-
Priority:
Unknown
-
Affects Version/s: None
-
Component/s: None
-
None
-
None
-
Python Drivers
-
None
-
None
-
None
-
None
-
None
-
None
Name of Failure:
test.test_encryption.TestKmsTLSProse.test_invalid_hostname_in_kms_certificate
test.test_encryption.TestKmsTLSOptions.test_01_aws
test.test_encryption.TestKmsTLSOptions.test_02_azure
test.test_encryption.TestKmsTLSOptions.test_03_gcp
test.test_encryption.TestKmsTLSOptions.test_04_kmip
Link to task:
Here is a re-run of a task that had previously passed: https://spruce.mongodb.com/task/mongo_python_driver_test_macos_encryption__platform~macos_1100_auth~auth_ssl~nossl_encryption~encryption_pyopenssl_test_latest_replica_set_dcec41577186a122e76e7f025a26d0b32e63a428_24_01_10_16_20_10/tests?execution=1&sortBy=STATUS&sortDir=ASC
Context of when and why the failure occurred:
Service-identity 24.1.0 was released on 14 Jan, which is when our PyOpenSSL builds started failing.
Stack trace:
[2024/01/26 07:26:14.636] FAILURE: AssertionError: "IP address mismatch|wronghost|IPAddressMismatch" does not match "127.0.0.1:8001: ('Certificate does not contain any `subjectAltName`s.',)" () [2024/01/26 07:26:14.636] pymongo.errors.EncryptionError: 127.0.0.1:8001: ('Certificate does not contain any `subjectAltName`s.',) [2024/01/26 07:26:14.636] During handling of the above exception, another exception occurred: [2024/01/26 07:26:14.636] self = <test.test_encryption.TestKmsTLSProse testMethod=test_invalid_hostname_in_kms_certificate> [2024/01/26 07:26:14.636] def test_invalid_hostname_in_kms_certificate(self): [2024/01/26 07:26:14.636] key = { [2024/01/26 07:26:14.636] "region": "us-east-1", [2024/01/26 07:26:14.636] "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", [2024/01/26 07:26:14.636] "endpoint": "mongodb://127.0.0.1:8001", [2024/01/26 07:26:14.636] } [2024/01/26 07:26:14.636] # Some examples: [2024/01/26 07:26:14.636] # certificate verify failed: IP address mismatch, certificate is not valid for '127.0.0.1'. (_ssl.c:1129)" [2024/01/26 07:26:14.636] # hostname '127.0.0.1' doesn't match 'wronghost.com' [2024/01/26 07:26:14.636] > with self.assertRaisesRegex( [2024/01/26 07:26:14.636] EncryptionError, "IP address mismatch|wronghost|IPAddressMismatch" [2024/01/26 07:26:14.636] ): [2024/01/26 07:26:14.636] E AssertionError: "IP address mismatch|wronghost|IPAddressMismatch" does not match "127.0.0.1:8001: ('Certificate does not contain any `subjectAltName`s.',)" [2024/01/26 07:26:14.636] test/test_encryption.py:2027: AssertionError