[Debian-iot-maintainers] Bug#1094157: mosquitto: Sporadic SSL autopkgtest failures

[Joachim Zobel]

Source: mosquitto
Version: 2.0.20-2
Severity: normal

Autopkgtests fail with

./08-ssl-connect-cert-auth-expired.py
1737794412: The 'port' option is now deprecated and will be removed in a future
version. Please use 'listener' instead.
1737794412: mosquitto version 2.0.20 starting
1737794412: Config loaded from 08-ssl-connect-cert-auth-expired.conf.
1737794412: Opening ipv4 listen socket on port 1888.
1737794412: Opening ipv6 listen socket on port 1888.
1737794412: Opening ipv4 listen socket on port 1889.
1737794412: Opening ipv6 listen socket on port 1889.
1737794412: mosquitto version 2.0.20 running
1737794413: New connection from ::1:46892 on port 1889.
1737794413: Client <unknown> closed its connection.
1737794413: New connection from 127.0.0.1:57692 on port 1888.
1737794413: OpenSSL Error[0]: error:0A000086:SSL routines::certificate verify
failed
1737794413: Client <unknown> disconnected: Protocol error.
1737794413: mosquitto version 2.0.20 terminating

Traceback (most recent call last):
  File "/tmp/autopkgtest.VIjXET/build.jf2/src/test/broker/./08-ssl-connect-
cert-auth-expired.py", line 40, in <module>
    mosq_test.do_send_receive(ssock, connect_packet, "", "connack")
    ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/tmp/autopkgtest.VIjXET/build.jf2/src/test/mosq_test.py", line 136, in
do_send_receive
    sent = sock.send(send_packet[total_sent:])
  File "/usr/lib/python3.13/ssl.py", line 1232, in send
    return self._sslobj.write(data)
           ~~~~~~~~~~~~~~~~~~^^^^^^
ConnectionResetError: [Errno 104] Connection reset by peer
make: *** [Makefile:154: 08] Error 1
make: Leaving directory '/tmp/autopkgtest.VIjXET/build.jf2/src/test/broker'
autopkgtest [09:40:14]: test broker: -----------------------]
autopkgtest [09:40:15]: test broker:  - - - - - - - - - - results - - - - - - -
- - -
broker               FLAKY non-zero exit status 2
autopkgtest [09:40:15]: test broker:  - - - - - - - - - - stderr - - - - - - -
- - -
Traceback (most recent call last):
  File "/tmp/autopkgtest.VIjXET/build.jf2/src/test/broker/./08-ssl-connect-
cert-auth-expired.py", line 40, in <module>
    mosq_test.do_send_receive(ssock, connect_packet, "", "connack")
    ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/tmp/autopkgtest.VIjXET/build.jf2/src/test/mosq_test.py", line 136, in
do_send_receive
    sent = sock.send(send_packet[total_sent:])
  File "/usr/lib/python3.13/ssl.py", line 1232, in send
    return self._sslobj.write(data)
           ~~~~~~~~~~~~~~~~~~^^^^^^
ConnectionResetError: [Errno 104] Connection reset by peer
make: *** [Makefile:154: 08] Error 1

This is not always reproducible, but always produces the same error.


-- System Information:
Debian Release: trixie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64

Kernel: Linux 6.12.9-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information