canonical-ubuntu-qa team mailing list archive

[Magali Lemes do Sacramento <2068608@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The n:fips kernel has some net:tls selftests failing with the aria-gcm
variant, which is not allowed in FIPS mode. Output sample below:

# #  RUN           tls.12_aria_gcm.sendfile ...
# # tls.c:383:sendfile:Expected ret (-1) == 0 (0)
# # sendfile: Test terminated by assertion
# #          FAIL  tls.12_aria_gcm.sendfile
# not ok 591 tls.12_aria_gcm.sendfile
# #  RUN           tls.12_aria_gcm.send_then_sendfile ...
# # tls.c:383:send_then_sendfile:Expected ret (-1) == 0 (0)
# # send_then_sendfile: Test terminated by assertion
# #          FAIL  tls.12_aria_gcm.send_then_sendfile
# not ok 592 tls.12_aria_gcm.send_then_sendfile
# #  RUN           tls.12_aria_gcm.recv_max ...
# # tls.c:383:recv_max:Expected ret (-1) == 0 (0)
# # recv_max: Test terminated by assertion
# #          FAIL  tls.12_aria_gcm.recv_max
# not ok 593 tls.12_aria_gcm.recv_max


This was found in the 6.8.0-31.31+fips3 version, during the d2024.02.29 cycle in all supported architectures.
We have to just set the `fips_non_compliant` field to `true` for these failing variants here, so that these tests are skipped:
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/tree/tools/testing/selftests/net/tls.c?h=Ubuntu-6.8.0-31.31#n353

** Affects: ubuntu-kernel-tests
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2068608

Title:
   ubuntu_kernel_selftests:net:tls: 106 failed test cases on noble/fips

Status in ubuntu-kernel-tests:
  New

Bug description:
  The n:fips kernel has some net:tls selftests failing with the aria-gcm
  variant, which is not allowed in FIPS mode. Output sample below:

  # #  RUN           tls.12_aria_gcm.sendfile ...
  # # tls.c:383:sendfile:Expected ret (-1) == 0 (0)
  # # sendfile: Test terminated by assertion
  # #          FAIL  tls.12_aria_gcm.sendfile
  # not ok 591 tls.12_aria_gcm.sendfile
  # #  RUN           tls.12_aria_gcm.send_then_sendfile ...
  # # tls.c:383:send_then_sendfile:Expected ret (-1) == 0 (0)
  # # send_then_sendfile: Test terminated by assertion
  # #          FAIL  tls.12_aria_gcm.send_then_sendfile
  # not ok 592 tls.12_aria_gcm.send_then_sendfile
  # #  RUN           tls.12_aria_gcm.recv_max ...
  # # tls.c:383:recv_max:Expected ret (-1) == 0 (0)
  # # recv_max: Test terminated by assertion
  # #          FAIL  tls.12_aria_gcm.recv_max
  # not ok 593 tls.12_aria_gcm.recv_max

  
  This was found in the 6.8.0-31.31+fips3 version, during the d2024.02.29 cycle in all supported architectures.
  We have to just set the `fips_non_compliant` field to `true` for these failing variants here, so that these tests are skipped:
  https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/tree/tools/testing/selftests/net/tls.c?h=Ubuntu-6.8.0-31.31#n353

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2068608/+subscriptions