<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:17:51 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CDRIVER-3379] Remove x509 tests against ldaptest.10gen.cc</title>
                <link>https://jira.mongodb.org/browse/CDRIVER-3379</link>
                <project id="10030" key="CDRIVER">C Driver</project>
                    <description>&lt;p&gt;The C driver evergreen project tests auth with x509 against ldaptest.10gen.cc, using certificates referenced in this wiki page&lt;br/&gt;
&lt;a href=&quot;https://wiki.corp.mongodb.com/display/DRIVERS/Testing+x.509&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://wiki.corp.mongodb.com/display/DRIVERS/Testing+x.509&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;AFAIK no other drivers are testing x509 auth against ldaptest, but our auth tests are failing on rhel80 due to the weak crypto in those certs.&lt;/p&gt;

&lt;p&gt;Copying from Roberto Sanchez&apos;s comment in &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-2940&quot; title=&quot;Regenerate test certificates with SHA256 signatures&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-2940&quot;&gt;&lt;del&gt;CDRIVER-2940&lt;/del&gt;&lt;/a&gt;, the authentication task connects like so:&lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/23 22:47:21.881&amp;#93;&lt;/span&gt; + echo &apos;Authenticating using X.509&apos;&lt;br/&gt;
&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/23 22:47:21.881&amp;#93;&lt;/span&gt; + ./src/libmongoc/mongoc-ping &apos;mongodb://CN=client,OU=kerneluser,O=10Gen,L=New York City,ST=New York,C=US@ldaptest.10gen.cc/?ssl=true&amp;amp;authMechanism=MONGODB-X509&amp;amp;sslClientCertificateKeyFile=src/libmongoc/tests/x509gen/legacy-x509.pem&amp;amp;sslCertificateAuthorityFile=src/libmongoc/tests/x509gen/legacy-ca.crt&amp;amp;sslAllowInvalidHostnames=true&amp;amp;connectTimeoutMS=30000&amp;amp;serverSelectionTryOnce=false&apos;&lt;br/&gt;
&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/23 22:47:51.438&amp;#93;&lt;/span&gt; Ping failure: No suitable servers found: `serverselectiontimeoutms` timed out: &lt;span class=&quot;error&quot;&gt;&amp;#91;TLS handshake failed: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed calling ismaster on &amp;#39;ldaptest.10gen.cc:27017&amp;#39;&amp;#93;&lt;/span&gt;&lt;br/&gt;
&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/23 22:47:51.439&amp;#93;&lt;/span&gt; OpenSSL 1.1.1 FIPS  11 Sep 2018&lt;br/&gt;
Authenticating using X.509&lt;br/&gt;
&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/23 22:47:51.439&amp;#93;&lt;/span&gt; Command failed: command encountered problem: exit status 3&lt;/p&gt;

&lt;p&gt;There is a long-open BUILD ticket to regenerate those certs here in BUILD-2782. But I believe testing x509 against ldaptest.10gen.cc does not give us additional coverage. We test x509 as part of our normal auth tests (our orchestration files use the certs referenced in &lt;a href=&quot;https://jira.mongodb.org/browse/DRIVERS-575&quot; title=&quot;Regenerate test certificates with SHA256 signatures&quot; class=&quot;issue-link&quot; data-issue-key=&quot;DRIVERS-575&quot;&gt;&lt;del&gt;DRIVERS-575&lt;/del&gt;&lt;/a&gt;, which all other drivers use).&lt;/p&gt;

&lt;p&gt;Let&apos;s verify that testing against ldaptest.10gen.cc really does not give us any benefit, and then remove those tests.&lt;/p&gt;</description>
                <environment></environment>
        <key id="946091">CDRIVER-3379</key>
            <summary>Remove x509 tests against ldaptest.10gen.cc</summary>
                <type id="3" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14718&amp;avatarType=issuetype">Task</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13203">Gone away</resolution>
                                        <assignee username="kevin.albertson@mongodb.com">Kevin Albertson</assignee>
                                    <reporter username="kevin.albertson@mongodb.com">Kevin Albertson</reporter>
                        <labels>
                    </labels>
                <created>Mon, 30 Sep 2019 15:56:08 +0000</created>
                <updated>Fri, 27 Oct 2023 19:50:18 +0000</updated>
                            <resolved>Thu, 9 Jan 2020 19:01:14 +0000</resolved>
                                                                    <component>Build</component>
                    <component>tests</component>
                                        <votes>0</votes>
                                    <watches>1</watches>
                                                                                                                <comments>
                            <comment id="2714895" author="kevin.albertson" created="Thu, 9 Jan 2020 19:01:14 +0000"  >&lt;p&gt;This appears to no longer be failing on master.&lt;/p&gt;</comment>
                            <comment id="2712859" author="kevin.albertson" created="Wed, 8 Jan 2020 21:16:33 +0000"  >&lt;p&gt;It appears the referenced failing RHEL 8 patch build was this one: &lt;a href=&quot;https://evergreen.mongodb.com/version/5d893abb306615699f1e864a&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://evergreen.mongodb.com/version/5d893abb306615699f1e864a&lt;/a&gt; but logs are no longer attached.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="681028">CDRIVER-2940</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                                        </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hvi1rz:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>