What version of Go are you using (go version)?
$ rhel8-7d32e1526b2a-0# ../../../bin/go version
$ go version devel +d2765de863 Thu May 2 15:38:36 2019 +0000 linux/amd64
Does this issue reproduce with the latest release?
Yes
What operating system and processor architecture are you using (go env)?
go env Output
$ rhel8-7d32e1526b2a-0# ../../../bin/go env
GOARCH="amd64"
GOBIN=""
GOCACHE="/root/.cache/go-build"
GOENV="/root/.config/go/env"
GOEXE=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/root/go"
GOPROXY="direct"
GOROOT="/go"
GOSUMDB="off"
GOTMPDIR=""
GOTOOLDIR="/go/pkg/tool/linux_amd64"
GCCGO="gccgo"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/go/src/go.mod"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build126288050=/tmp/go-build -gno-record-gcc-switches"
What did you do?
I attempted to update some of the recorded TLS tests using OpenSSL 1.1.1 built and configured according to the recommended way: ./config enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method.
What did you expect to see?
The test pass and a new recording generated.
What did you see instead?
OpenSSL failed to start due to a small key size:
=== RUN TestRenegotiateTwiceRejected
=== RUN TestRenegotiateTwiceRejected/TLSv12
--- FAIL: TestRenegotiateTwiceRejected (0.16s)
--- FAIL: TestRenegotiateTwiceRejected/TLSv12 (0.16s)
handshake_client_test.go:315: Failed to start subcommand: error connecting to the OpenSSL server: dial tcp 127.0.0.1:24323: connect: connection refused (exit status 1)
Using default temp DH parameters
error setting certificate
140698504263488:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: DH PARAMETERS
140698504263488:error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small:ssl/ssl_rsa.c:310:
What version of Go are you using (
go version)?Does this issue reproduce with the latest release?
Yes
What operating system and processor architecture are you using (
go env)?go envOutputWhat did you do?
I attempted to update some of the recorded TLS tests using OpenSSL 1.1.1 built and configured according to the recommended way:
./config enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method.What did you expect to see?
The test pass and a new recording generated.
What did you see instead?
OpenSSL failed to start due to a small key size: