Skip to content

Update TLS test regexes for OpenSSL 4.0 error message changes#5186

Open
ottok wants to merge 1 commit into
MariaDB:10.6from
ottok:fix-openssl-4.0-test-compatibility
Open

Update TLS test regexes for OpenSSL 4.0 error message changes#5186
ottok wants to merge 1 commit into
MariaDB:10.6from
ottok:fix-openssl-4.0-test-compatibility

Conversation

@ottok
Copy link
Copy Markdown
Contributor

@ottok ottok commented Jun 5, 2026

OpenSSL 4.0 changed TLS alert error messages from "ssl/tls alert ..." to "tls alert ...", causing main.ssl_crl and main.tlsv13 to fail with result mismatches like:

-ERROR 2026 (HY000): TLS/SSL error: ssl/tls alert handshake failure
-ERROR 2026 (HY000): TLS/SSL error: ssl/tls alert handshake failure
+ERROR 2026 (HY000): TLS/SSL error: tls alert handshake failure
+ERROR 2026 (HY000): TLS/SSL error: tls alert handshake failure

Update the --replace_regex patterns in both tests to accept the new "tls alert" variant alongside the existing "sslv3" and "ssl/tls" formats, normalizing them to the expected "ssl/tls" output so the result files remain valid across OpenSSL versions.

This targets 10.6 because #5029 (about https://jira.mariadb.org/browse/MDEV-39509) was also submitted for 10.6.

OpenSSL 4.0 changed TLS alert error messages from "ssl/tls alert ..." to
"tls alert ...", causing main.ssl_crl and main.tlsv13 to fail with
result mismatches like:

    -ERROR 2026 (HY000): TLS/SSL error: ssl/tls alert handshake failure
    -ERROR 2026 (HY000): TLS/SSL error: ssl/tls alert handshake failure
    +ERROR 2026 (HY000): TLS/SSL error: tls alert handshake failure
    +ERROR 2026 (HY000): TLS/SSL error: tls alert handshake failure

Update the `--replace_regex` patterns in both tests to accept the new
"tls alert" variant alongside the existing "sslv3" and "ssl/tls"
formats, normalizing them to the expected "ssl/tls" output so the
result files remain valid across OpenSSL versions.
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the regular expression replacements in the test files mysql-test/main/ssl_crl.test and mysql-test/main/tlsv13.test to accommodate different TLS/SSL alert formats, specifically matching 'sslv3', 'ssl/tls', or 'tls' alerts. There are no review comments provided, so I have no feedback to offer.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant