-
Type: Improvement
-
Resolution: Fixed
-
Priority: Unknown
-
Affects Version/s: None
-
Component/s: Tests
OCSP tests are still failing intermittently:
[2022-06-06 05:16:32.990] W, [2022-06-06T05:16:32.990061 #142] WARN -- : MONGODB | TLS certificate of 'foo' could not be definitively verified via OCSP: For responders http://ocsp.digicert.com with a timeout of 7 seconds: OCSP response from http://ocsp.digicert.com is 6: unauthorized [2022-06-06 05:16:33.235] W, [2022-06-06T05:16:33.235256 #142] WARN -- : MONGODB | TLS certificate of 'foo' could not be definitively verified via OCSP: For responders http://ocsp.digicert.com with a timeout of 7 seconds: OCSP response from http://ocsp.digicert.com is 6: unauthorized [2022-06-06 05:16:33.462] W, [2022-06-06T05:16:33.462540 #142] WARN -- : MONGODB | TLS certificate of 'foo' could not be definitively verified via OCSP: For responders http://ocsp.digicert.com with a timeout of 7 seconds: OCSP response from http://ocsp.digicert.com is 6: unauthorized [2022-06-06 05:16:33.521] [2022-06-06 05:16:33.521] 1) Mongo::Socket::OcspVerifier responder URI has no path verifies [2022-06-06 05:16:33.521] Failure/Error: verifier.verify.should be true [2022-06-06 05:16:33.521] [2022-06-06 05:16:33.521] expected true [2022-06-06 05:16:33.521] got false [2022-06-06 05:16:33.521] # ./spec/integration/ocsp_verifier_spec.rb:353:in `block (3 levels) in <top (required)>' [2022-06-06 05:16:33.521] # ./spec/shared/lib/mrss/lite_constraints.rb:217:in `block in retry_test' [2022-06-06 05:16:33.521] # ./spec/support/common_shortcuts.rb:165:in `block in with_openssl_debug' [2022-06-06 05:16:33.521] # ./spec/lite_spec_helper.rb:138:in `block (3 levels) in <top (required)>' [2022-06-06 05:16:33.521] # ./spec/lite_spec_helper.rb:137:in `block (2 levels) in <top (required)>' [2022-06-06 05:16:33.521] # ./spec/lite_spec_helper.rb:117:in `block (2 levels) in <top (required)>' [2022-06-06 05:16:33.521] # ./spec/support/background_thread_registry.rb:65:in `block (2 levels) in <top (required)>' [2022-06-06 05:16:33.521] [2022-06-06 05:16:33.522]
We can see there have been 3 attempts and they all failed with "unauthorized" which perhaps is some kind of throttling.
I think we should add an option to sleep before retries, and set it to 5 seconds for the ocsp tests.