Editing Test Day:2017-03-30 CryptoPolicies

{{Infobox_group
| name = Crypto Policies
| image = [[File:test-days-banner.svg|300px|link=QA/Test Days]]
| date = 2017-03-30
| time = all day
| website = [[QA/Test Days]]
| irc = [irc://irc.freenode.net/#fedora-test-day #fedora-test-day] ([http://webchat.freenode.net/?channels=fedora-test-day webirc])
| fedora_mailing_list = test
}}

{{admon/note | Can't make the date? | If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at [http://bugzilla.redhat.com Bugzilla], and add your results to the results section. If this page is more than a month old when you arrive here, please check the [[QA/Test_Days|current schedule]] and see if a similar but more recent Test Day is planned or has already happened.}}

== What to test? ==

Today's instalment of Fedora Test Day will focus on [[Changes/CryptoPolicy|crypto-policies]]

== Who's available ==

The following cast of characters will be available testing, workarounds, bug fixes, and general discussion. In case of problem related to test day organization/wiki/whatever, please reach out to szidek.
* Development - [[User:Nmav|Nikos Mavrogiannopoulos]] (nmav, GnuTLS, crypto-policies), [[User:Tmraz|Tomáš Mráz]] (t8m, OpenSSL), Kai Engert (kaie, NSS), [[User:Rrelyea|Robert Relyea]] (rrelyea, NSS), [[User:Ueno|Daiki Ueno]] (ueno, NSS), [[User:Jjelen|Jakub Jelen]] (jjelen, OpenSSH)
* Quality Assurance - [[User:Szidek|Stanislav Židek]] (szidek), [[User:Hkario|Hubert Kario]] (hkario)

== Prerequisite for Test Day == 
* An updated Fedora 26 [https://getfedora.org/workstation/prerelease workstation] or [https://getfedora.org/server/prerelease server] pre-release, or a [https://www.happyassassin.net/nightlies.html Fedora 26 nightly image]
* a desire to break software ;)

== How to test? ==

=== '''Update your machine''' ===

If you're running Fedora 26, make sure you have all the current updates for it installed, using the update manager. If you want to try Rawhide, see the instructions on the [[Releases/Rawhide|Rawhide]] page on the various ways in which you can install or update to Rawhide. Or:

=== '''Live image''' ===

Instead of testing with an installed system, you may download a non-destructive nightly live image for your architecture. Tips on using a live image are available at [[FedoraLiveCD]]. Live image links can be found [https://www.happyassassin.net/nightlies.html here]: please be sure to download one for the correct release.

=== Run the tests ===

Visit the [http://testdays.fedorainfracloud.org/events/16 result page] and click on the column title links to see the tests that need to be run: most column titles are links to a specific test case. Follow the instructions there, then enter your results by clicking the ''Enter result'' button for the test.

== Reporting bugs ==

Include some instructions on how to report bugs, and any special instructions. Here's an example, from a Palimpsest test day:

If you have problems with any of the tests, report a bug to [https://bugzilla.redhat.com Bugzilla] usually for the component [https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&version=26&component=crypto-policies crypto-policies], or for particular software using crypto-policies. If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you.

== Test Results ==

Results transferred from the [http://testdays.fedorainfracloud.org/events/16 result page] on 2017-04-10.

=== Basic ===
{|
! User
! Profile
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_Sanity Sanity]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_BogusProfile Switching to bogus profile]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_openssh OpenSSH support]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_Firefox Firefox]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_Java Java]
! References
|-
| [[User:Tenk|Tenk]]
| F26 Alpha 1.7
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|fail}}<ref>{{bz|1437213}} </ref>
| 
| <references/>
|-
| [[User:akashche|akashche]]
| F26 running in Docker
| {{result|pass}}<ref>https://bugzilla.redhat.com/show_bug.cgi?id=1437213 - cannot access rc4.badssl.com, 3des.badssl.com worked as expected</ref>
| {{result|pass}}
| 
| {{result|pass}}
| {{result|pass}}
| <references/>
|-
| [[User:coremodule|coremodule]]
| 
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}{{result|warn}}<ref>For FUTURE, received this output:
Unable to negotiate with ::1 port 22: no matching cipher found. Their offer: 3des-cbc
</ref>
| 
| {{result|pass}}
| <references/>
|-
| [[User:jsedlak|jsedlak]]
| 
| {{result|pass}}<ref>Everything that was uncommented ran OK.</ref>
| {{result|pass}}
| 
| 
| 
| <references/>
|-
| [[User:jvanek|jvanek]]
| 
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| 
| {{result|warn}}<ref>As mentioned by pmikova and mvala - when FUTURE is selected, nearly no https connection is possible to establish with icedtea-web</ref>
| <references/>
|-
| [[User:krouma|krouma]]
| 
| {{result|pass}}
| {{result|pass}}<ref>Passed even with special symbols and Czech characters</ref>
| {{result|pass}}
| {{result|fail}}<ref>Test part 3.: Web pages https://3des.badssl.com/ and https://rc4.badssl.com/ were failing for all 3 profiles.</ref>{{result|fail}}
| {{result|pass}}
| <references/>
|-
| [[User:lzachar|lzachar]]
| 
| {{result|fail}}<ref>{{bz|1437213}} {{bz|1437209}} {{bz|1437363}} 1437363 not yet mentioned on testcase wiki</ref>
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}<ref>with https://koji.fedoraproject.org/koji/taskinfo?taskID=18679218</ref>
| {{result|pass}}
| <references/>
|-
| [[User:mvala|mvala]]
| 
| 
| 
| 
| 
| {{result|warn}}<ref>SSL missing in FUTURE</ref>{{result|pass}}
| <references/>
|-
| [[User:pkis|pkis]]
| 
| {{result|pass}}
| {{result|warn}}<ref>{{bz|1437449}} The test pass, but an usability issue was filed: BZ#1437449</ref>
| {{result|pass}}
| 
| 
| <references/>
|-
| [[User:pmikova|pmikova]]
| 
| 
| 
| 
| 
| {{result|warn}}<ref>useSystemPropertiesFile=true sudo update-crypto-policies --set FUTURE
https://www.elsteronline.de/eportal/KonfigurationsAssistentA.tax?requestaction=KonfigurationsAssistentA.tax - Error performing TLS handshake: The signature algorithm is not supported.
java CipherList | wc -l  is 25 on FUTURE but java CipherList | wc -l is 36 on DEFAULT
diff https://gist.github.com/sparkoo/ef37b8624f922b5c08d084dde23bdad4</ref>
| <references/>
|-
| [[User:pschindl|pschindl]]
| Updated F26
| {{result|fail}}<ref>{{bz|1437213}} {{bz|1437209}} {{bz|1437363}} </ref>
| {{result|pass}}
| {{result|pass}}
| 
| 
| <references/>
|-
| [[User:zdenek|zdenek]]
| 
| {{result|pass}}<ref>Commands were completed without FAIL</ref>
| {{result|pass}}
| 
| {{result|fail}}<ref>Test part 3.: Web pages https://3des.badssl.com/ and https://rc4.badssl.com/ were failing for all 3 profiles.</ref>
| 
| <references/>

|-
|}

=== User driven ===
{|
! User
! Profile
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_InTheWildFUTURE FUTURE profile with commonly visited sites]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_SpecificApps Specific apps]
! [http://fedoraproject.org/wiki/QA:Testcase_CryptoPolicies_OwnApp Own app]
! References
|-
| [[User:akashche|akashche]]
| F26 in Docker
| {{result|pass}}
| 
| {{result|pass}}<ref>Tried FUTURE with https://github.com/ojdkbuild/contrib_update-notifier , https://github.com/staticlibs/staticlib_httpserver and https://github.com/staticlibs/staticlib_httpclient</ref>
| <references/>

|-
|}

[[Category:Fedora 26 Test Days]]