Jira (PUP-4820) osx curl with client certs causes puppet acceptance test to segfault

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-4820 osx curl with client certs causes puppet acceptance test to segfault Issue Type: Bug Assignee: Unassigned Created: 2015/07/07 9:23 AM Priority: Normal Reporter: Josh Cooper The following puppet acceptance tests fail when invoking curl with client certificates: Test Case tests/concurrency/ticket_2659_concurrent_catalog_requests.rb Test Case tests/environment/can_enumerate_environments.rb Test Case tests/security/cve-2013-1652_improper_query_params.rb Test Case tests/security/cve-2013-4761_resource_type.rb The actual failure looks like: #<RuntimeError: PuppetAcceptance::DSL::Helpers.with_puppet_running_on failed (check backtrace for location) because: Host 'sxmv4xxp7it66t6.delivery.puppetlabs.net' connection failure running: curl --tlsv1 -g --cert "/etc/puppetlabs/puppet/ssl/certs/sxmv4xxp7it66t6.delivery.puppetlabs.net.pem" --key "/etc/puppetlabs/puppet/ssl/private_keys/sxmv4xxp7it66t6.delivery.puppetlabs.net.pem" -k -H 'Accept: pson' 'https://towhwjn4bo43eyb.delivery.puppetlabs.net:8140/puppet/v3/resource_type/::..::..::..::..::..::tmp::exploit?environment=production' Last 10 lines of output were: 8 libcurl.4.dylib 0x00007fff87749cef multi_runsingle + 799 9 libcurl.4.dylib 0x00007fff8774993d curl_multi_perform + 170 10 libcurl.4.dylib 0x00007fff87742d25 curl_easy_perform + 352 11 curl 0x000000010cb76a87 curl + 47751 12 curl 0x000000010cb731f4 curl + 33268 13 curl 0x000000010cb72c00 curl + 31744 14 libdyld.dylib 0x00007fff89e555c9 start + 1 15 ??? 0x000000000000000b 0x0 + 11 ) libc++abi.dylib: terminating with uncaught exception of type NSException /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/host.rb:259:in `exec' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/helpers/host_helpers.rb:73:in `block in on' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/shared/host_manager.rb:104:in `run_block_on' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/patterns.rb:32:in `block_on' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/helpers/host_helpers.rb:63:in `on' tests/security/cve-2013-4761_resource_type.rb:50:in `block (5 levels) in run_test' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/structure.rb:41:in `step' tests/security/cve-2013-4761_resource_type.rb:43:in `block (4 levels) in run_test' tests/security/cve-2013-4761_resource_type.rb:36:in `each' tests/security/cve-2013-4761_resource_type.rb:36:in `block (3 levels) in run_test' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/helpers/puppet_helpers.rb:153:in `with_puppet_running_on' tests/security/cve-2013-4761_resource_type.rb:32:in `block (2 levels) in run_test' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/dsl/structure.rb:52:in `test_name' tests/security/cve-2013-4761_resource_type.rb:10:in `block in run_test' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_case.rb:128:in `eval' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_case.rb:128:in `block in run_test' /Users/josh/.rbenv/versions/2.1.5/lib/ruby/2.1.0/benchmark.rb:294:in `realtime' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_case.rb:125:in `run_test' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_suite.rb:286:in `block in run' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_suite.rb:283:in `each' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_suite.rb:283:in `run' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/test_suite.rb:325:in `run_and_raise_on_failure' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/cli.rb:153:in `run_suite' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/lib/beaker/cli.rb:93:in `execute!' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/gems/beaker-2.14.1/bin/beaker:6:in `<top (required)>' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/bin/beaker:23:in `load' /Users/josh/work/puppet/acceptance/.bundle/ruby/2.1.0/bin/beaker:23:in `<main>' > The issue appears to be a bug in mac osx curl: http://stackoverflow.com/questions/26968715/os-x-git-with-client-certificates-rejected, with various workarounds (by adding the root ca cert to the keystore) Add Comment   This message was sent by Atlassian JIRA (v6.4.5#64020-sha1:78acd6c) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.