Skip to content

Update cert that became valid and broke tests #32812

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
May 18, 2021
Merged

Update cert that became valid and broke tests #32812

merged 4 commits into from
May 18, 2021

Conversation

HaoK
Copy link
Member

@HaoK HaoK commented May 18, 2021

We had a cert that wasn't supposed to valid until 5/17/2021, which passed, updated the cert to be valid in 10 years instead. Will file another issue to generate these certs dynamically rather than relying on checked certs

@HaoK HaoK requested a review from Tratcher as a code owner May 18, 2021 16:26
@ghost ghost added the area-auth Includes: Authn, Authz, OAuth, OIDC, Bearer label May 18, 2021
@HaoK HaoK requested review from blowdart and a team May 18, 2021 16:26
@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

fyi @dotnet/aspnet-build all helix test runs will fail until this is fixed

@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

In all branches...so let me know where this change needs to be merged

@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

#32813 to eventually fix the root issue (checked in certs) per @blowdart suggestion

@HaoK HaoK enabled auto-merge (squash) May 18, 2021 16:37
@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

Fun stuff, we had two copies of these certs, the ones in shared/tests are the correct ones to update :)

@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

Test still failing only on ubuntu for some reason, skipping for now to unblock builds, will reenable in a future PR

@HaoK
Copy link
Member Author

HaoK commented May 18, 2021

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 2 pipeline(s).

@pranavkm
Copy link
Contributor

pranavkm commented May 18, 2021

@HaoK I'm going to merge this change once all the builds (except Helix) pass. There's a deadlock between getting this change in + getting the E2E changes which are both required to unblock the build. FYI @dotnet/aspnet-build

@pranavkm pranavkm disabled auto-merge May 18, 2021 22:28
@pranavkm pranavkm merged commit 2e20bab into main May 18, 2021
@pranavkm pranavkm deleted the haok/fixTest branch May 18, 2021 22:28
@ghost ghost added this to the 6.0-preview5 milestone May 18, 2021
@HaoK
Copy link
Member Author

HaoK commented May 20, 2021

/backport to release/5.0

@github-actions
Copy link
Contributor

Started backporting to release/5.0: https://github.com/dotnet/aspnetcore/actions/runs/862115327

@ghost
Copy link

ghost commented May 20, 2021

Hi @github-actions[bot]. It looks like you just commented on a closed PR. The team will most probably miss it. If you'd like to bring something important up to their attention, consider filing a new issue and add enough details to build context.

@HaoK
Copy link
Member Author

HaoK commented May 20, 2021

/backport to release/3.1

@github-actions
Copy link
Contributor

Started backporting to release/3.1: https://github.com/dotnet/aspnetcore/actions/runs/862116167

@ghost
Copy link

ghost commented May 20, 2021

Hi @github-actions[bot]. It looks like you just commented on a closed PR. The team will most probably miss it. If you'd like to bring something important up to their attention, consider filing a new issue and add enough details to build context.

@dougbu
Copy link
Contributor

dougbu commented May 20, 2021

Unless I'm off-base, these backports won't work yet. Should be a quick fix (ported from dotnet/runtime) but I haven't seen @wtgodbe's PR to do it yet.

@Tratcher
Copy link
Member

Tratcher commented May 20, 2021

@mkArtakMSFT

Edit Nevermind, it's github-actions[bot] that's triggering msftbot.

@HaoK
Copy link
Member Author

HaoK commented May 20, 2021

So don't use the bot just manually port these?

@dougbu
Copy link
Contributor

dougbu commented May 20, 2021

So don't use the bot just manually port these?

For now, focus on preview5 please. Otherwise, we've got some time.

@HaoK
Copy link
Member Author

HaoK commented May 20, 2021

This is already in preview5 I believe, I see it here: 2e20bab

@dougbu
Copy link
Contributor

dougbu commented May 20, 2021

This is already in preview5 I believe,

👍

Bottom line: I'd wait for @wtgodbe's fix before worrying about backports.

@HaoK
Copy link
Member Author

HaoK commented May 26, 2021

/backport to release/5.0

@github-actions
Copy link
Contributor

Started backporting to release/5.0: https://github.com/dotnet/aspnetcore/actions/runs/878059864

@HaoK
Copy link
Member Author

HaoK commented May 26, 2021

/backport to release/3.1

@github-actions
Copy link
Contributor

Started backporting to release/3.1: https://github.com/dotnet/aspnetcore/actions/runs/878061375

dougbu pushed a commit that referenced this pull request May 28, 2021
- backport of 2e20bab (#32812)
- dupe of #33033

* Update cert to not be valid for 50 years

* Make cert valid in 10 years

* Delete unused copy of certs, update right one

* Skip test for now
@halter73
Copy link
Member

halter73 commented Jun 1, 2021

@HaoK I know this is old, but how did you decide on 10 years out instead of the original 50 years out (or longer)?

dougbu pushed a commit that referenced this pull request Jun 1, 2021
- backport of 2e20bab (#32812)
- dupe of #33033

* Update cert to not be valid for 50 years

* Make cert valid in 10 years

* Delete unused copy of certs, update right one

* Skip test for now
dougbu added a commit that referenced this pull request Jun 1, 2021
* [release/5.9] Update branding to v5.0.8
  - disable baseline validation
* [release/5.0] Update cert that became valid and broke tests
  - backport of 2e20bab (#32812)
  - dupe of #33033
    * Update cert to not be valid for 50 years
    * Make cert valid in 10 years
    * Delete unused copy of certs, update right one
    * Skip test for now
* [release/5.0] Update Chrome driver
  - backport of e7b5aa6 (#33019)
* [release/5.0] Update selenium chrome driver
  - backport of af96aba (#33043)
@HaoK
Copy link
Member Author

HaoK commented Jun 1, 2021

I asked @blowdart for an appropriate expiration since he wrote these tests originally that's the number he suggested, I just randomly picked 50 to start since that seems safe enough that we would never have to worry about this cert test failing again :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-auth Includes: Authn, Authz, OAuth, OIDC, Bearer
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants