#32618·openssl

Frequent test hangs in 4.1 (master) on Nonstop tests

Author: rsbeckercaCreated Aug 31, 2026Updated Sep 16, 2026
Labelsbranch: masterhelp wantedtriaged: bug

I am experiencing at frequent hangs present in the latest master but not 4.0.2 waiting on openssl to close/shutdown. This appears in the tests below - no real indication of where from what I can see but would appreciate help in debugging and isolating this. Killing the openssl server process is sufficient to let the tests proceed. There have be two so far, in this test run, somewhere below.

A bit of context: signals are often deferred on Nonstop x86, so if waiting on a SIGCHLD in a wait_for_process() operation, the SIGCHLD may not be received unless the code is threaded. This may be a red-herring, however.

Note: Because of buffering of the output in this test run, I am unsure whether this is in sslvertol or stime tests (very likely stime). With that said, may I also request a pass/fail message of some kind at the end of each test - I don't might doing this.

Failures occur in unthreaded 64-bit builds. Unfortunately, no indication of the failure is present in the log at all for these tests. The overall summary of the test failures follows the log.

[18:30:22] 70-test_sslvertol.t ...................... 
# The results of this test will end up in test-runs/test_sslvertol
# Checking enabled protocol tls1
# 'tls', '1' => TLSProxy::Record::VERS_TLS_1_0
# Checking enabled protocol tls1_1
# 'tls', '1', '_1' => TLSProxy::Record::VERS_TLS_1_1
# Checking enabled protocol tls1_2
# 'tls', '1', '_2' => TLSProxy::Record::VERS_TLS_1_2
# Checking enabled protocol tls1_3
# 'tls', '1', '_3' => TLSProxy::Record::VERS_TLS_1_3
# TLS versions we can expect: 769, 770, 771, 772
Proxy started on port [::1]:61231
Server command: ../../util/wrap.pl ../../apps/openssl s_server -no_comp -provider=p_ossltest -provider=default -propquery ?provider=p_ossltest -state -ext_cache -accept [::1]:0 -naccept 1 -cert ../../apps/server.pem -cert2 ../../apps/server.pem -rev -max_protocol TLSv1.3 -cipher AES128-SHA -ciphersuites TLS_AES_128_GCM_SHA256
Using default temp DH parameters
ACCEPT [::1]:61442
Server responds on [::1]:61442
Client command: ../../util/wrap.pl ../../apps/openssl s_client -provider=p_ossltest -provider=default -propquery ?provider=p_ossltest -state -connect [::1]:61231 -max_protocol TLSv1.3 -no_tls1_3 -servername localhost
SSL_accept:before SSL initialization
Connecting to ::1
SSL_connect:before SSL initialization
Connection opened
SSL_connect:SSLv3/TLS write client hello
Received client packet
Packet length = 249
Processing flight 0
 Record 1 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.0
  Length: 244
  Message type: ClientHello(1)
  Message Length: 240
    Client Version:TLS1.2
    Session ID Len:0
    Ciphersuite len:54
    Compression Method Len:1
    Extensions Len:145

Forwarded packet length = 249

SSL_accept:before SSL initialization
SSL_accept:SSLv3/TLS read client hello
SSL_accept:SSLv3/TLS write server hello
SSL_accept:SSLv3/TLS write certificate
SSL_accept:SSLv3/TLS write server done
Received server packet
Packet length = 899
Processing flight 1
 Record 1 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 61
  Message type: ServerHello(2)
  Message Length: 57
    Server Version:TLS1.2
    Session ID Len:0
    Ciphersuite:47
    Compression Method:0
    Extensions Len:17
 Record 2 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 819
  Message type: Certificate(11)
  Message Length: 815
    Certificate List Len:812
    Certificate Len:809
 Record 3 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 4
  Message type: ServerHelloDone(14)
  Message Length: 0

Forwarded packet length = 899

SSL_connect:SSLv3/TLS write client hello
SSL_connect:SSLv3/TLS read server hello
depth=0 CN=server.example
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN=server.example
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 CN=server.example
verify return:1
SSL_connect:SSLv3/TLS read server certificate
SSL_connect:SSLv3/TLS read server done
SSL_connect:SSLv3/TLS write client key exchange
SSL_connect:SSLv3/TLS write change cipher spec
SSL_connect:SSLv3/TLS write finished
Received client packet
Packet length = 346
Processing flight 2
 Record 1 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 262
  Message type: ClientKeyExchange(16)
  Message Length: 258
 Record 2 (client -> server)
  Content type: CCS
  Version: TLS1.2
  Length: 1
 Record 3 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 68
  Message type: Finished(20)
  Message Length: 12

Forwarded packet length = 346

SSL_accept:SSLv3/TLS write server done
SSL_accept:SSLv3/TLS read client key exchange
SSL_accept:SSLv3/TLS read change cipher spec
SSL_accept:SSLv3/TLS read finished
SSL_accept:SSLv3/TLS write session ticket
SSL_accept:SSLv3/TLS write change cipher spec
SSL_accept:SSLv3/TLS write finished
CONNECTION ESTABLISHED
Protocol version: TLSv1.2
Received server packet
Packet length = 270
Processing flight 3
 Record 1 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 186
  Message type: NewSessionTicket(4)
  Message Length: 182
 Record 2 (server -> client)
  Content type: CCS
  Version: TLS1.2
  Length: 1
 Record 3 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 68
  Message type: Finished(20)
  Message Length: 12

Client cipher list: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA
Ciphersuite: AES128-SHA
Forwarded packet length = 270

SSL_connect:SSLv3/TLS write finished
SSL_connect:SSLv3/TLS read server session ticket
SSL_connect:SSLv3/TLS read change cipher spec
SSL_connect:SSLv3/TLS read finished
CONNECTED(00000003)
---
Certificate chain
 0 s:CN=server.example
   i:CN=Root CA
   a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: Jan 14 22:29:46 2016 GMT; NotAfter: Jan 15 22:29:46 2116 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN=server.example
issuer=CN=Root CA
---
No client certificate CA names sent
---
SSL handshake has read 1169 bytes and written 595 bytes
Verification error: unable to verify the first certificate
---
New, SSLv3, Cipher is AES128-SHA
Protocol: TLSv1.2
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES128-SHA
    Session-ID: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
    Session-ID-ctx: 
    Master-Key: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F000102030405060708090A0B0C0D0E0F
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 01 02 03 04 05 06 07 08-09 0a 0b 0c 0d 0e 0f 10   ................
    0010 - 01 02 03 04 05 06 07 08-09 0a 0b 0c 0d 0e 0f 10   ................
    0020 - 58 76 ff ae da bb 4c da-12 c8 93 e8 23 4d c7 22   Xv....L.....#M."
    0030 - db fe ba 88 41 b0 e1 d5-cd 43 e4 30 1e a1 91 ab   ....A....C.0....
    0040 - cb 97 55 51 51 dc 8c 7a-fc 81 c0 81 71 cc 3b 82   ..UQQ..z....q.;.
    0050 - 33 e0 1e 92 05 c0 fc 4b-48 b0 fc c3 b4 a4 0c 99   3......KH.......
    0060 - 4b 66 ec 41 e2 70 62 b9-8f 67 56 d0 d7 dd 77 62   Kf.A.pb..gV...wb
    0070 - 5f 1f 8a d9 7b 13 c6 72-27 1d a8 d1 8f 6c e9 28   _...{..r'....l.(
    0080 - 3f 93 61 bc b1 a4 a2 a9-9f f2 db 9f 4e 34 57 62   ?.a.........N4Wb
    0090 - 00 01 02 03 04 05 06 07-08 09 0a 0b 0c 0d 0e 0f   ................
    00a0 - 10 11 12 13 14 15 16 17-18 19 1a 1b 1c 1d 1e 1f   ................

    Start Time: 1788197421
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: yes
---
ECH: NOT CONFIGURED: -103
---
DONE
SSL3 alert write:warning:close notify
Received client packet
Packet length = 57
Processing flight 4
 Record 1 (client -> server)
  Content type: APPLICATION DATA
  Version: TLS1.2
  Length: 52
  [ENCRYPTED APPLICATION DATA]
  [test]

Forwarded packet length = 57

Received client packet
Packet length = 57
Processing flight 4
 Record 1 (client -> server)
  Content type: ALERT
  Version: TLS1.2
  Length: 52
  [1, 0]

Forwarded packet length = 57

Received server packet
Packet length = 114
Processing flight 5
 Record 1 (server -> client)
  Content type: APPLICATION DATA
  Version: TLS1.2
  Length: 52
Signature Algorithms: mldsa65:mldsa87:mldsa44:ecdsa_secp256r1_sha256:ecdsa_secp384r1_sha384:ecdsa_secp521r1_sha512:ed25519:ed448:ecdsa_brainpoolP256r1tls13_sha256:ecdsa_brainpoolP384r1tls13_sha384:ecdsa_brainpoolP512r1tls13_sha512:rsa_pss_pss_sha256:rsa_pss_pss_sha384:rsa_pss_pss_sha512:rsa_pss_rsae_sha256:rsa_pss_rsae_sha384:rsa_pss_rsae_sha512:rsa_pkcs1_sha256:rsa_pkcs1_sha384:rsa_pkcs1_sha512:ecdsa_sha224:rsa_pkcs1_sha224:dsa_sha224:dsa_sha256:dsa_sha384:dsa_sha512:slhdsa_sha2_128s:slhdsa_sha2_128f:slhdsa_sha2_192s:slhdsa_sha2_192f:slhdsa_sha2_256s:slhdsa_sha2_256f:slhdsa_shake_128s:slhdsa_shake_128f:slhdsa_shake_192s:slhdsa_shake_192f:slhdsa_shake_256s:slhdsa_shake_256f:sm2sig_sm3
Own signature type: rsa_pss_rsae_sha256
No peer certificate or raw public key
Supported Elliptic Curve Point Formats: uncompressed
Supported groups: x25519:secp256r1:x448:secp384r1:secp521r1:ffdhe2048:ffdhe3072
SSL3 alert read:warning:close notify
  [ENCRYPTED APPLICATION DATA]
  [tset
]
 Record 2 (server -> client)
CONNECTION CLOSED
SSL3 alert write:warning:close notify
  Content type: ALERT
  Version: TLS1.2
  Length: 52
  [1, 0]

Forwarded packet length = 114

Connection closed
Waiting for 'perl -ne print' process to close: 16777422...
   0 items in the session cache
   0 client connects (SSL_connect())
   0 client renegotiates (SSL_connect())
   0 client connects that finished
   1 server accepts (SSL_accept())
   0 server renegotiates (SSL_accept())
   1 server accepts that finished
   0 session cache hits
   0 session cache misses
   0 session cache timeouts
   0 callback cache hits
   0 cache full overflows (20480 allowed)
Waiting for s_server process to close: 2080374886...
Waiting for s_client process to close: 369098835...
1..3
# Record version received: 771
ok 1 - Version tolerance test, below TLS 1.4 and not TLS 1.3
Proxy started on port [::1]:61390
Server command: ../../util/wrap.pl ../../apps/openssl s_server -no_comp -provider=p_ossltest -provider=default -propquery ?provider=p_ossltest -state -ext_cache -accept [::1]:0 -naccept 1 -cert ../../apps/server.pem -cert2 ../../apps/server.pem -rev -max_protocol TLSv1.3 -cipher AES128-SHA -ciphersuites TLS_AES_128_GCM_SHA256
Using default temp DH parameters
ACCEPT [::1]:61657
Server responds on [::1]:61657
Client command: ../../util/wrap.pl ../../apps/openssl s_client -provider=p_ossltest -provider=default -propquery ?provider=p_ossltest -state -connect [::1]:61390 -max_protocol TLSv1.3 -no_tls1_3 -servername localhost
SSL_accept:before SSL initialization
Connecting to ::1
SSL_connect:before SSL initialization
Connection opened
SSL_connect:SSLv3/TLS write client hello
Received client packet
Packet length = 249
Processing flight 0
 Record 1 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.0
  Length: 244
  Message type: ClientHello(1)
  Message Length: 240
    Client Version:TLS1.2
    Session ID Len:0
    Ciphersuite len:54
    Compression Method Len:1
    Extensions Len:145

Forwarded packet length = 249

SSL_accept:before SSL initialization
SSL_accept:SSLv3/TLS read client hello
SSL_accept:SSLv3/TLS write server hello
SSL_accept:SSLv3/TLS write certificate
SSL_accept:SSLv3/TLS write server done
Received server packet
Packet length = 899
Processing flight 1
 Record 1 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 61
  Message type: ServerHello(2)
  Message Length: 57
    Server Version:TLS1.2
    Session ID Len:0
    Ciphersuite:47
    Compression Method:0
    Extensions Len:17
 Record 2 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 819
  Message type: Certificate(11)
  Message Length: 815
    Certificate List Len:812
    Certificate Len:809
 Record 3 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 4
  Message type: ServerHelloDone(14)
  Message Length: 0

Forwarded packet length = 899

SSL_connect:SSLv3/TLS write client hello
SSL_connect:SSLv3/TLS read server hello
depth=0 CN=server.example
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN=server.example
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 CN=server.example
verify return:1
SSL_connect:SSLv3/TLS read server certificate
SSL_connect:SSLv3/TLS read server done
SSL_connect:SSLv3/TLS write client key exchange
SSL_connect:SSLv3/TLS write change cipher spec
SSL_connect:SSLv3/TLS write finished
Received client packet
Packet length = 346
Processing flight 2
 Record 1 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 262
  Message type: ClientKeyExchange(16)
  Message Length: 258
 Record 2 (client -> server)
  Content type: CCS
  Version: TLS1.2
  Length: 1
 Record 3 (client -> server)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 68
  Message type: Finished(20)
  Message Length: 12

Forwarded packet length = 346

SSL_accept:SSLv3/TLS write server done
SSL_accept:SSLv3/TLS read client key exchange
SSL_accept:SSLv3/TLS read change cipher spec
SSL_accept:SSLv3/TLS read finished
SSL_accept:SSLv3/TLS write session ticket
SSL_accept:SSLv3/TLS write change cipher spec
SSL_accept:SSLv3/TLS write finished
CONNECTION ESTABLISHED
Protocol version: TLSv1.2
Received server packet
Packet length = 270
Processing flight 3
 Record 1 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 186
  Message type: NewSessionTicket(4)
  Message Length: 182
 Record 2 (server -> client)
  Content type: CCS
  Version: TLS1.2
  Length: 1
 Record 3 (server -> client)
  Content type: HANDSHAKE
  Version: TLS1.2
  Length: 68
Client cipher list: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA
Ciphersuite: AES128-SHA
  Message type: Finished(20)
  Message Length: 12

Forwarded packet length = 270

SSL_connect:SSLv3/TLS write finished
SSL_connect:SSLv3/TLS read server session ticket
SSL_connect:SSLv3/TLS read change cipher spec
SSL_connect:SSLv3/TLS read finished
CONNECTED(00000003)
---
Certificate chain
 0 s:CN=server.example
   i:CN=Root CA
   a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: Jan 14 22:29:46 2016 GMT; NotAfter: Jan 15 22:29:46 2116 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN=server.example
issuer=CN=Root CA
---
No client certificate CA names sent
---
SSL handshake has read 1169 bytes and written 595 bytes
Verification error: unable to verify the first certificate
---
New, SSLv3, Cipher is AES128-SHA
Protocol: TLSv1.2
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES128-SHA
    Session-ID: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F
    Session-ID-ctx: 
    Master-Key: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F000102030405060708090A0B0C0D0E0F
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 01 02 03 04 05 06 07 08-09 0a 0b 0c 0d 0e 0f 10   ................
    0010 - 01 02 03 04 05 06 07 08-09 0a 0b 0c 0d 0e 0f 10   ................
    0020 - 58 76 ff ae da bb 4c da-12 c8 93 e8 23 4d c7 22   Xv....L.....#M."
    0030 - db fe ba 88 41 b0 e1 d5-cd 43 e4 30 1e a1 91 ab   ....A....C.0....
    0040 - cb 97 55 51 51 dc 8c 7a-fc 81 c0 81 71 cc 3b 82   ..UQQ..z....q.;.
    0050 - 33 e0 1e 92 05 c0 fc 4b-48 b0 fc c3 b4 a4 0c 99   3......KH.......
    0060 - da 76 6d 11 6a a1 0a 39-45 a3 3c ef d8 16 cd 8c   .vm.j..9E.<.....
    0070 - 68 59 f9 7b 4e de a5 4e-78 57 b4 24 f9 a3 4b dc   hY.{N..NxW.$..K.
    0080 - 3f 85 e9 70 4c c3 a2 33-42 f7 bf 1b d4 d2 c4 48   ?..pL..3B......H
    0090 - 00 01 02 03 04 05 06 07-08 09 0a 0b 0c 0d 0e 0f   ................
    00a0 - 10 11 12 13 14 15 16 17-18 19 1a 1b 1c 1d 1e 1f   ................

    Start Time: 1788197422
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: yes
---
ECH: NOT CONFIGURED: -103
---
Signature Algorithms: mldsa65:mldsa87:mldsa44:ecdsa_secp256r1_sha256:ecdsa_secp384r1_sha384:ecdsa_secp521r1_sha512:ed25519:ed448:ecdsa_brainpoolP256r1tls13_