owncloud / files_primary_s3

📦 S3 compatible Storage
GNU General Public License v2.0
16 stars 5 forks source link

[Nightly failure] Scality pipelines failed with `certificate problem: unable to get local issuer certificate` #663

Closed SwikritiT closed 1 year ago

SwikritiT commented 1 year ago

API tests are failing in nightly

+ cd /var/www/owncloud/server/apps/files_primary_s3
+ cp tests/drone/scality.config.php /var/www/owncloud/server/config
+ sed -i -e "s/owncloud/owncloud-acceptance-tests-$DRONE_BUILD_NUMBER-$DRONE_STAGE_NUMBER/" /var/www/owncloud/server/config/scality.config.php
+ sed -i -e "s/accessKey1/$SCALITY_KEY/" /var/www/owncloud/server/config/scality.config.php
+ sed -i -e "s/verySecretKey1/$SCALITY_SECRET_ESCAPED/" /var/www/owncloud/server/config/scality.config.php
+ sed -i -e "s/http/https/" /var/www/owncloud/server/config/scality.config.php
+ sed -i -e "s/scality:8000/s3.isv.scality.com/" /var/www/owncloud/server/config/scality.config.php
+ cd /var/www/owncloud/server
+ php occ s3:create-bucket owncloud-acceptance-tests-$DRONE_BUILD_NUMBER-$DRONE_STAGE_NUMBER --accept-warning
Creating bucket <owncloud-acceptance-tests-3529-142> ...

In WrappedHttpHandler.php line 195:

  Error executing "CreateBucket" on "https://s3.isv.scality.com/owncloud-acce  
  ptance-tests-3529-142"; AWS HTTP error: cURL error 60: SSL certificate prob  
  lem: unable to get local issuer certificate (see https://curl.haxx.se/libcu  
  rl/c/libcurl-errors.html) for https://s3.isv.scality.com/owncloud-acceptanc  
  e-tests-3529-142                                                             

In CurlFactory.php line 211:

  cURL error 60: SSL certificate problem: unable to get local issuer certific  
  ate (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://s3  
  .isv.scality.com/owncloud-acceptance-tests-3529-142                          

s3:create-bucket [--update-configuration] [--accept-warning] [--] <bucket>
SwikritiT commented 1 year ago

Previously we had similar issues like:https://github.com/owncloud/files_primary_s3/issues/602 https://github.com/owncloud/files_primary_s3/issues/564

SwikritiT commented 1 year ago

cc @phil-davis

SwikritiT commented 1 year ago

Usually the tests pass after few days so maybe we can wait for few days.

phil-davis commented 1 year ago

Usually the tests pass after few days so maybe we can wait for few days.

yes, we can wait a few days and it might "fix itself".

SwikritiT commented 1 year ago

This failure occurred throughout the weekend https://drone.owncloud.com/owncloud/files_primary_s3/3535/141/18

SwikritiT commented 1 year ago

@phil-davis This is still failing, we face this kind of error almost every month. The nightly is rarely green, Do we still want to run these tests on nightly?

phil-davis commented 1 year ago

https://drone.owncloud.com/owncloud/files_primary_s3/3551/141/18

php occ s3:create-bucket owncloud-acceptance-tests-$DRONE_BUILD_NUMBER-$DRONE_STAGE_NUMBER --accept-warning
Creating bucket <owncloud-acceptance-tests-3551-141> ...
In WrappedHttpHandler.php line 195:
  Error executing "CreateBucket" on "https://s3.isv.scality.com/owncloud-acceptance-tests-3551-141"; 
  AWS HTTP error: cURL error 60: SSL certificate problem: unable to get local issuer certificate
  (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://s3.isv.scality.com/owncloud-acceptance-tests-3551-141

In CurlFactory.php line 211:

  cURL error 60: SSL certificate problem: unable to get local issuer certificate 
  (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://s3.isv.scality.com/owncloud-acceptance-tests-3551-141

s3:create-bucket [--update-configuration] [--accept-warning] [--] <bucket>

Exit Code 1

This keeps happening for all the Scality8 and Scality Artesca pipelines.

phil-davis commented 1 year ago

@micbar we started running files_primary_s3 tests against these provided Scality 8 and Scality Artesca S# servers quite some time ago. They regularly go offline, or there is some problem resolving DNS to reach them, or certificates expire, or...

Should we keep trying to chase up the provider to get them working again? Or do we remove these pipelines from nightly CI?

phil-davis commented 1 year ago

It has been decided to remove the scality pipelines that rely on the external servers. See PR #667