[From nobody Tue May 26 11:27:09 2026 Received: (at submit) by bugs.debian.org; 11 Dec 2023 16:51:14 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02 (2021-04-09) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-17.0 required=4.0 tests=BAYES_00, BODY_INCLUDES_PACKAGE,FROMDEVELOPER,HAS_PACKAGE,HELO_MISC_IP,RDNS_NONE, SPF_NONE,T_SCC_BODY_TEXT_LINE,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 66; hammy, 84; neutral, 30; spammy, 1. spammytokens:0.945-+--H*r:bugs.debian.org hammytokens:0.000-+--H*M:reportbug, 0.000-+--H*MI:reportbug, 0.000-+--H*x:reportbug, 0.000-+--H*UA:reportbug, 0.000-+--H*x:12.0.0 Return-path: <rmb@debian.org> Received: from [129.159.227.111] (port=32780 helo=[127.0.1.1]) by buxtehude.debian.org with esmtp (Exim 4.94.2) (envelope-from <rmb@debian.org>) id 1rCjUv-007s2o-Hm for submit@bugs.debian.org; Mon, 11 Dec 2023 16:51:13 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Mohammed Bilal <rmb@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: gitlab: login using web-based 2FA fails Message-ID: <170231347047.1039440.5339910028392640244.reportbug@debian> X-Mailer: reportbug 12.0.0 Date: Mon, 11 Dec 2023 22:21:10 +0530 Delivered-To: submit@bugs.debian.org Package: gitlab Version: 16.0.8+ds1-2~fto12+2 Severity: important Dear Maintainer, Relevant section from the logs: ----------------------------------------------------------------------------- OpenSSL::PKey::PKeyError (pkeys are immutable on OpenSSL 3.0): app/services/webauthn/authenticate_service.rb:54:in `verify_webauthn_credential' app/services/webauthn/authenticate_service.rb:22:in `execute' app/controllers/concerns/authenticates_with_two_factor.rb:90:in `authenticate_with_two_factor_via_webauthn' app/controllers/concerns/authenticates_with_two_factor.rb:51:in `authenticate_with_two_factor' lib/gitlab/middleware/memory_report.rb:13:in `call' lib/gitlab/middleware/speedscope.rb:13:in `call' lib/gitlab/database/load_balancing/rack_middleware.rb:23:in `call' lib/gitlab/jira/middleware.rb:19:in `call' lib/gitlab/middleware/go.rb:20:in `call' lib/gitlab/etag_caching/middleware.rb:21:in `call' lib/gitlab/middleware/query_analyzer.rb:11:in `block in call' lib/gitlab/database/query_analyzer.rb:37:in `within' lib/gitlab/middleware/query_analyzer.rb:11:in `call' lib/gitlab/middleware/multipart.rb:173:in `call' lib/gitlab/middleware/read_only/controller.rb:50:in `call' lib/gitlab/middleware/read_only.rb:18:in `call' lib/gitlab/middleware/same_site_cookies.rb:27:in `call' lib/gitlab/middleware/basic_health_check.rb:25:in `call' lib/gitlab/middleware/handle_malformed_strings.rb:21:in `call' lib/gitlab/middleware/handle_ip_spoof_attack_error.rb:25:in `call' lib/gitlab/middleware/request_context.rb:15:in `call' lib/gitlab/middleware/webhook_recursion_detection.rb:15:in `call' config/initializers/fix_local_cache_middleware.rb:11:in `call' lib/gitlab/middleware/compressed_json.rb:45:in `call' lib/gitlab/middleware/rack_multipart_tempfile_factory.rb:19:in `call' lib/gitlab/middleware/sidekiq_web_static.rb:20:in `call' lib/gitlab/metrics/requests_rack_middleware.rb:79:in `call' lib/gitlab/middleware/release_env.rb:13:in `call' Regards ]