[DRIVERS-2217] OCSP tests failing Created: 24/Feb/22  Updated: 28/Oct/23  Resolved: 25/Feb/22

Status: Closed
Project: Drivers
Component/s: None
Fix Version/s: None

Type: Task Priority: Unknown
Reporter: Shane Harvey Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Driver Changes: Not Needed

 Description   

test-ocsp-rsa-delegate-invalid-cert-server-does-not-staple and test-ocsp-rsa-invalid-cert-server-does-not-staple have been failing since Feb 18th, last passed on Feb 11th. It could be caused by this error starting the mock_ocsp_responder:

 [2022/02/18 09:47:54.777] Traceback (most recent call last):
 [2022/02/18 09:47:54.777]   File "ocsp_mock.py", line 13, in <module>
 [2022/02/18 09:47:54.777]     import mock_ocsp_responder
 [2022/02/18 09:47:54.777]   File "Z:\data\mci\ca13ceb1e156e1d312f647b6776e82ff\drivers-tools\.evergreen\ocsp\mock_ocsp_responder.py", line 57, in <module>
 [2022/02/18 09:47:54.777]     from flask import Flask, request, Response
 [2022/02/18 09:47:54.777]   File "Z:\data\mci\ca13ceb1e156e1d312f647b6776e82ff\drivers-tools\.evergreen\ocsp\venv\lib\site-packages\flask\__init__.py", line 19, in <module>
 [2022/02/18 09:47:54.777]     from . import json
 [2022/02/18 09:47:54.777]   File "Z:\data\mci\ca13ceb1e156e1d312f647b6776e82ff\drivers-tools\.evergreen\ocsp\venv\lib\site-packages\flask\json\__init__.py", line 15, in <module>
 [2022/02/18 09:47:54.777]     from itsdangerous import json as _json
 [2022/02/18 09:47:54.777] ImportError: cannot import name 'json' from 'itsdangerous' (Z:\data\mci\ca13ceb1e156e1d312f647b6776e82ff\drivers-tools\.evergreen\ocsp\venv\lib\site-packages\itsdangerous\__init__.py)
...
 [2022/02/18 09:48:56.357] FAIL: test_tls (__main__.TestOCSP)
 [2022/02/18 09:48:56.357] ----------------------------------------------------------------------
 [2022/02/18 09:48:56.357] Traceback (most recent call last):
 [2022/02/18 09:48:56.357]   File "test/ocsp/test_ocsp.py", line 68, in test_tls
 [2022/02/18 09:48:56.357]     ServerSelectionTimeoutError, "invalid status response", _connect, options
 [2022/02/18 09:48:56.357] AssertionError: ServerSelectionTimeoutError not raised by _connect

https://evergreen.mongodb.com/task/mongo_python_driver_4.0_ocsp_test_windows__platform~windows_64_vsMulti_small_auth~noauth_ssl~ssl_mongodb_version~4.4_python_version_windows~3.6_test_ocsp_rsa_delegate_invalid_cert_server_does_not_staple_cbae04f13c896ef112339ed601ca149715cd4f38_22_02_17_01_13_50

The expected OCSP Responder output should be:

 [2022/02/11 06:49:23.141] Initializing OCSP Responder
 [2022/02/11 06:49:23.141]  * Serving Flask app "mock_ocsp_responder" (lazy loading)
 [2022/02/11 06:49:23.141]  * Environment: production
 [2022/02/11 06:49:23.141]    WARNING: This is a development server. Do not use it in a production deployment.
 [2022/02/11 06:49:23.141]    Use a production WSGI server instead.
 [2022/02/11 06:49:23.169] INFO:mock_ocsp_responder:Launching debugserver on port 8100
 [2022/02/11 06:49:23.169] INFO:werkzeug: * Restarting with stat
 [2022/02/11 06:49:23.680] INFO:mock_ocsp_responder:Launching debugserver on port 8100
 [2022/02/11 06:49:23.680] WARNING:werkzeug: * Debugger is active!
 [2022/02/11 06:49:23.721] INFO:werkzeug: * Debugger PIN: 138-496-095
 [2022/02/11 06:49:23.721] INFO:werkzeug: * Running on http://127.0.0.1:8100/ (Press CTRL+C to quit)



 Comments   
Comment by Githook User [ 25/Feb/22 ]

Author:

{'name': 'Shane Harvey', 'email': 'shnhrv@gmail.com', 'username': 'ShaneHarvey'}

Message: DRIVERS-2217 Upgrade and pin mock OCSP responder deps (#189)
Branch: master
https://github.com/mongodb-labs/drivers-evergreen-tools/commit/43eaae7bcfc40d594e0751f8c971424a4706695a

Comment by Shane Harvey [ 24/Feb/22 ]

PR: https://github.com/mongodb-labs/drivers-evergreen-tools/pull/189

Comment by Shane Harvey [ 24/Feb/22 ]

I believe we can simply update the dependencies to include itsdangerous or upgrade to higher version of flask: https://github.com/mongodb-labs/drivers-evergreen-tools/blob/1d6a678f44c8c55eec9b3c999ec3d3bca0c3023f/.evergreen/ocsp/mock-ocsp-responder-requirements.txt

Comment by Shane Harvey [ 24/Feb/22 ]

This looks to be caused by this change: https://itsdangerous.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

Remove previously deprecated code: import itsdangerous.json: Import json from the standard library instead.

I suppose itsdangerous does not follow semver?

Generated at Thu Feb 08 08:25:01 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.