make test-only and make test giving errors after fresh install

[chinmoy12c]

• Version:
  v16.0.0

• Platform:
  Linux masterkali 4.19.0-kali4-amd64 deps: update openssl to 1.0.1j #1 SMP Debian 4.19.28-2kali1 (2019-03-18) x86_64 GNU/Linux

• Subsystem:
  make test-only

What steps will reproduce the bug?

• Follow these steps https://github.com/nodejs/node/blob/master/BUILDING.md#building-nodejs-on-supported-platforms
• Run make test-only

How often does it reproduce? Is there a required condition?

100%, tried reinstalling again still getting the same errors.

What is the expected behavior?

Tests should pass without any errors.

What do you see instead?

I'm getting this output in the console.

Console output for make test-only

=== release test-https-server-keep-alive-timeout ===                    
Path: sequential/test-https-server-keep-alive-timeout
node:_tls_common:153
    context.setCert(cert);
            ^

Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
    at setCerts (node:_tls_common:153:13)
    at Object.createSecureContext (node:_tls_common:208:7)
    at Server.setSecureContext (node:_tls_wrap:1324:27)
    at Server (node:_tls_wrap:1182:8)
    at new Server (node:https:66:14)
    at Object.createServer (node:https:91:10)
    at serverKeepAliveTimeoutWithPipeline (/home/Chinmoy/MasterFiles/openSource/node/node/test/sequential/test-https-server-keep-alive-timeout.js:32:24)
    at run (/home/Chinmoy/MasterFiles/openSource/node/node/test/sequential/test-https-server-keep-alive-timeout.js:28:11)
    at processTicksAndRejections (node:internal/process/task_queues:75:11) {
  library: 'SSL routines',
  function: 'SSL_CTX_use_certificate',
  reason: 'ee key too small',
  code: 'ERR_SSL_EE_KEY_TOO_SMALL'
}
Command: out/Release/node /home/Chinmoy/MasterFiles/openSource/node/node/test/sequential/test-https-server-keep-alive-timeout.js
=== release test-tls-securepair-client ===                                    
Path: sequential/test-tls-securepair-client
Using default temp DH parameters
ACCEPT [::]:46097
WAIT-ACCEPT
client connected
client: connected+secure!
client pair.cleartext.getPeerCertificate(): {"subject":{"C":"UK","ST":"Acknack Ltd","L":"Rhys Jones","O":"node.js","OU":["Test TLS Certificate","Engineering"],"CN":"localhost","emailAddress":"[email protected]"},"issuer":{"C":"UK","ST":"Acknack Ltd","L":"Rhys Jones","O":"node.js","OU":["Test TLS Certificate","Engineering"],"CN":"localhost","emailAddress":"[email protected]"},"modulus":"B7DC58888A27B1C0B7BF3FC0D9C791ECA8596650EEFF96F27B9DE70954DC2A759DDAC798E9401D29EAEC5FA9E3AFCDC37793957B5056FF026FA7912359300661B16CC25366783E3879D10633DDFD07A2EAFBFF22064AD38BC986378602CAD8AF136E182340F85D930F7E42D2A5A6F6CBF1F2E038D0281AB54E16745019CAFBD2215F7EC9BBF6681984A54C8188873C9A898061EF0AD90683DCCC812EE9EB7F90DD959E76D152D9184C5F7B82072FE61FA10E95108D05B466038C71373C9FE4641A922DD3F88CFDB4E32374F3FE0B05762EA11DCA5981BA293CBEB7D36F7A881CB28A04023C957376EB05AD03790DE0BECD3FE71B2A509196A72DBE19B294B1F5","bits":2048,"exponent":"0x10001","pubkey":{"type":"Buffer","data":[48,130,1,34,48,13,6,9,42,134,72,134,247,13,1,1,1,5,0,3,130,1,15,0,48,130,1,10,2,130,1,1,0,183,220,88,136,138,39,177,192,183,191,63,192,217,199,145,236,168,89,102,80,238,255,150,242,123,157,231,9,84,220,42,117,157,218,199,152,233,64,29,41,234,236,95,169,227,175,205,195,119,147,149,123,80,86,255,2,111,167,145,35,89,48,6,97,177,108,194,83,102,120,62,56,121,209,6,51,221,253,7,162,234,251,255,34,6,74,211,139,201,134,55,134,2,202,216,175,19,110,24,35,64,248,93,147,15,126,66,210,165,166,246,203,241,242,224,56,208,40,26,181,78,22,116,80,25,202,251,210,33,95,126,201,187,246,104,25,132,165,76,129,136,135,60,154,137,128,97,239,10,217,6,131,220,204,129,46,233,235,127,144,221,149,158,118,209,82,217,24,76,95,123,130,7,47,230,31,161,14,149,16,141,5,180,102,3,140,113,55,60,159,228,100,26,146,45,211,248,140,253,180,227,35,116,243,254,11,5,118,46,161,29,202,89,129,186,41,60,190,183,211,111,122,136,28,178,138,4,2,60,149,115,118,235,5,173,3,121,13,224,190,205,63,231,27,42,80,145,150,167,45,190,25,178,148,177,245,2,3,1,0,1]},"valid_from":"Jun 28 21:36:48 2019 GMT","valid_to":"Apr 11 21:36:48 2293 GMT","fingerprint":"20:4D:CD:ED:43:8F:83:25:73:59:38:55:9D:20:3F:12:21:D5:1C:A0","fingerprint256":"44:45:CB:DB:5B:0D:D2:A2:3E:FD:CB:96:A3:F0:C2:37:E1:29:CB:98:5E:BB:6A:0A:DA:67:3C:88:7F:B6:8E:6D","serialNumber":"7F86780CA8F99095BAD0D13EF4F6AE7181657EDF","raw":{"type":"Buffer","data":[48,130,4,2,48,130,2,234,160,3,2,1,2,2,20,127,134,120,12,168,249,144,149,186,208,209,62,244,246,174,113,129,101,126,223,48,13,6,9,42,134,72,134,247,13,1,1,11,5,0,48,129,176,49,11,48,9,6,3,85,4,6,19,2,85,75,49,20,48,18,6,3,85,4,8,12,11,65,99,107,110,97,99,107,32,76,116,100,49,19,48,17,6,3,85,4,7,12,10,82,104,121,115,32,74,111,110,101,115,49,16,48,14,6,3,85,4,10,12,7,110,111,100,101,46,106,115,49,29,48,27,6,3,85,4,11,12,20,84,101,115,116,32,84,76,83,32,67,101,114,116,105,102,105,99,97,116,101,49,20,48,18,6,3,85,4,11,12,11,69,110,103,105,110,101,101,114,105,110,103,49,18,48,16,6,3,85,4,3,12,9,108,111,99,97,108,104,111,115,116,49,27,48,25,6,9,42,134,72,134,247,13,1,9,1,22,12,97,108,101,120,64,97,117,98,46,100,101,118,48,32,23,13,49,57,48,54,50,56,50,49,51,54,52,56,90,24,15,50,50,57,51,48,52,49,49,50,49,51,54,52,56,90,48,129,176,49,11,48,9,6,3,85,4,6,19,2,85,75,49,20,48,18,6,3,85,4,8,12,11,65,99,107,110,97,99,107,32,76,116,100,49,19,48,17,6,3,85,4,7,12,10,82,104,121,115,32,74,111,110,101,115,49,16,48,14,6,3,85,4,10,12,7,110,111,100,101,46,106,115,49,29,48,27,6,3,85,4,11,12,20,84,101,115,116,32,84,76,83,32,67,101,114,116,105,102,105,99,97,116,101,49,20,48,18,6,3,85,4,11,12,11,69,110,103,105,110,101,101,114,105,110,103,49,18,48,16,6,3,85,4,3,12,9,108,111,99,97,108,104,111,115,116,49,27,48,25,6,9,42,134,72,134,247,13,1,9,1,22,12,97,108,101,120,64,97,117,98,46,100,101,118,48,130,1,34,48,13,6,9,42,134,72,134,247,13,1,1,1,5,0,3,130,1,15,0,48,130,1,10,2,130,1,1,0,183,220,88,136,138,39,177,192,183,191,63,192,217,199,145,236,168,89,102,80,238,255,150,242,123,157,231,9,84,220,42,117,157,218,199,152,233,64,29,41,234,236,95,169,227,175,205,195,119,147,149,123,80,86,255,2,111,167,145,35,89,48,6,97,177,108,194,83,102,120,62,56,121,209,6,51,221,253,7,162,234,251,255,34,6,74,211,139,201,134,55,134,2,202,216,175,19,110,24,35,64,248,93,147,15,126,66,210,165,166,246,203,241,242,224,56,208,40,26,181,78,22,116,80,25,202,251,210,33,95,126,201,187,246,104,25,132,165,76,129,136,135,60,154,137,128,97,239,10,217,6,131,220,204,129,46,233,235,127,144,221,149,158,118,209,82,217,24,76,95,123,130,7,47,230,31,161,14,149,16,141,5,180,102,3,140,113,55,60,159,228,100,26,146,45,211,248,140,253,180,227,35,116,243,254,11,5,118,46,161,29,202,89,129,186,41,60,190,183,211,111,122,136,28,178,138,4,2,60,149,115,118,235,5,173,3,121,13,224,190,205,63,231,27,42,80,145,150,167,45,190,25,178,148,177,245,2,3,1,0,1,163,16,48,14,48,12,6,3,85,29,19,4,5,48,3,1,1,255,48,13,6,9,42,134,72,134,247,13,1,1,11,5,0,3,130,1,1,0,15,97,65,193,67,189,137,94,21,6,186,83,117,65,29,209,141,253,106,50,108,117,182,231,54,66,127,55,86,91,38,7,114,152,34,223,86,156,194,168,31,172,169,24,233,171,210,106,26,215,49,195,51,198,236,97,174,248,226,23,8,99,31,120,204,197,146,77,156,140,183,153,137,206,110,41,204,167,22,10,238,225,188,235,132,103,91,219,165,170,179,202,208,121,113,78,59,166,145,118,148,213,188,131,190,86,174,96,161,20,215,38,22,237,19,48,61,121,249,152,88,131,151,112,190,86,13,136,112,2,147,156,242,188,31,207,215,230,171,197,89,9,111,138,43,109,196,83,120,31,200,231,14,215,129,52,2,95,202,234,87,176,95,94,74,212,120,120,63,199,18,156,91,99,180,42,145,69,105,144,139,210,95,117,171,18,3,70,9,119,202,205,227,183,105,149,28,165,78,213,238,229,81,74,47,229,215,107,248,230,151,59,32,183,16,71,95,94,40,158,149,74,169,241,130,188,34,234,143,224,30,100,13,216,137,126,34,66,60,103,46,190,67,70,220,164,59,63,155,40,70,32,95,192,21,242]}}
client pair.cleartext.getCipher(): {"name":"TLS_AES_256_GCM_SHA384","standardName":"TLS_AES_256_GCM_SHA384","version":"TLSv1.3"}
-----BEGIN SSL SESSION PARAMETERS-----
MH0CAQECAgMEBAITAgQg9dx69fagnS8MZhnZ6uSvKb3aCLHDw8uodEw2g4VZlIME
MJaqZCWdCk+aYuD/ifwgaWZRff/gkAaXLHJ4jLdoGdHORAtQM3ZD5gJwzEyY7TG2
56EGAgRfxklNogQCAhwgpAYEBAEAAACuBgIEFxL6pQ==
-----END SSL SESSION PARAMETERS-----
Shared ciphers:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:AES128-SHA:AES256-SHA
Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:RSA+SHA224:DSA+SHA224:DSA+SHA256:DSA+SHA384:DSA+SHA512
Shared Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:RSA+SHA224
Supported Elliptic Groups: X25519:P-256:X448:P-521:P-384
Shared Elliptic groups: X25519:P-256:X448:P-521:P-384
CIPHER is TLS_AES_256_GCM_SHA384
Secure Renegotiation IS supported
hello
WAIT-HELLO
DONE
shutting down SSL
CONNECTION CLOSED
   0 items in the session cache
   0 client connects (SSL_connect())
   0 client renegotiates (SSL_connect())
   0 client connects that finished
   1 server accepts (SSL_accept())
   0 server renegotiates (SSL_accept())
   1 server accepts that finished
   0 session cache hits
   0 session cache misses
   0 session cache timeouts
   0 callback cache hits
   0 cache full overflows (128 allowed)
WAIT-SERVER-CLOSE
shutdown accept socket
client close
Using default temp DH parameters
WAIT-ACCEPT
error setting certificate
140047873881920:error:0909006C:PEM routines:get_name:no start line:../deps/openssl/openssl/crypto/pem/pem_lib.c:745:Expecting: DH PARAMETERS
140047873881920:error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small:../deps/openssl/openssl/ssl/ssl_rsa.c:310:
(node:30808) [DEP0064] DeprecationWarning: tls.createSecurePair() is deprecated. Please use tls.TLSSocket instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
node:assert:119
  throw new AssertionError(obj);
  ^

AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:

1 !== 0

    at process.<anonymous> (/home/Chinmoy/MasterFiles/openSource/node/node/test/sequential/test-tls-securepair-client.js:178:12)
    at process.emit (node:events:388:22) {
  generatedMessage: true,
  code: 'ERR_ASSERTION',
  actual: 1,
  expected: 0,
  operator: 'strictEqual'
}
Command: out/Release/node /home/Chinmoy/MasterFiles/openSource/node/node/test/sequential/test-tls-securepair-client.js
[03:12|% 100|+ 3105|- 162]: Done                                        
make[1]: *** [Makefile:280: jstest] Error 1
make: *** [Makefile:314: test-only] Error 2

[himself65]

Seems like a Debian issue? The agent1 key size is 1024 bit, or should we update the keys?

The fix it to tell your administrator to use 2048 (or more) bit
keys. I assume there are certificates on both sides, so they both
need to get replaced.

You can work around this issue by putting something like this in
your config file:
openssl_ciphers=DEFAULT@SECLEVEL=1

But you really should use a certificate with a stronger key.


Kurt

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907888

[targos]

@nodejs/crypto

[targos]

Closing as not actionable.

[richardlau]

This is a duplicate of #27862.