Skip to content

[v2] fix(vpnaas): change encryption and auth method in acceptance tests - #3760

Merged
kayrus merged 1 commit into
v2from
bp-v2-9be9846
May 21, 2026
Merged

[v2] fix(vpnaas): change encryption and auth method in acceptance tests#3760
kayrus merged 1 commit into
v2from
bp-v2-9be9846

Conversation

@gophercloud-backport-bot

@gophercloud-backport-bot gophercloud-backport-bot Bot commented May 20, 2026

Copy link
Copy Markdown

Backport: #3755

The SHA1, MD5, DES, and 3DES were deprecated in a recent neutron-vpnaas patch[1], leading functional-network tests to fail[2], because it was still using the deprecated algorithms when creating IKEPolicies and IPSecPolicies.

The following is from neutron-api logs.

May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource [None req-dad20a39-9d4e-4865-8313-fee6e3d275bd admin admin] create failed: No details.: oslo_db.exception.DBDataError: (pymysql.err.DataError) (1265, "Data truncated for column 'auth_algorithm' at row 1")
May 13 01:59:33 runnervmeorf1 [email protected][68404]: [SQL: INSERT INTO ikepolicies (name, description, auth_algorithm, encryption_algorithm, phase1_negotiation_mode, lifetime_units, lifetime_value, ike_version, pfs, id, project_id) VALUES (%(name)s, %(description)s, %(auth_algorithm)s, %(encryption_algorithm)s, %(phase1_negotiation_mode)s, %(lifetime_units)s, %(lifetime_value)s, %(ike_version)s, %(pfs)s, %(id)s, %(project_id)s)]
May 13 01:59:33 runnervmeorf1 [email protected][68404]: [parameters: {'name': 'TESTACC-qNb7XM52', 'description': '', 'auth_algorithm': 'sha1', 'encryption_algorithm': '3des', 'phase1_negotiation_mode': 'main', 'lifetime_units': 'seconds', 'lifetime_value': 3600, 'ike_version': 'v1', 'pfs': 'group5', 'id': 'a8e5f9f2-3a0a-429d-9ce5-aad7349f6819', 'project_id': '3bbedded112b4b71af57426f50e1edba'}]
May 13 01:59:33 runnervmeorf1 [email protected][68404]: (Background on this error at: https://sqlalche.me/e/20/9h9h)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource Traceback (most recent call last):
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/sqlalchemy/engine/base.py", line 1967, in _exec_single_context
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     self.dialect.do_execute(
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/sqlalchemy/engine/default.py", line 952, in do_execute
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     cursor.execute(statement, parameters)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/cursors.py", line 157, in execute
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     result = self._query(query)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource              ^^^^^^^^^^^^^^^^^^
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/cursors.py", line 328, in _query
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     conn.query(q)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/connections.py", line 575, in query
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     self._affected_rows = self._read_query_result(unbuffered=unbuffered)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/connections.py", line 826, in _read_query_result
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     result.read()
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/connections.py", line 1203, in read
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     first_packet = self.connection._read_packet()
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/connections.py", line 782, in _read_packet
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     packet.raise_for_error()
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/protocol.py", line 219, in raise_for_error
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     err.raise_mysql_exception(self._data)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource   File "/opt/stack/data/venv/lib/python3.12/site-packages/pymysql/err.py", line 150, in raise_mysql_exception
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource     raise errorclass(errno, errval)
May 13 01:59:33 runnervmeorf1 [email protected][68404]: ERROR neutron.api.v2.resource pymysql.err.DataError: (1265, "Data truncated for column 'auth_algorithm' at row 1")

[1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/982383
[2] https://github.com/gophercloud/gophercloud/actions/runs/25773190059/job/75700393995

@winiciusallan
fix(vpnaas): change encryption and auth method on acceptance tests
56188a1 
The SHA1, MD5, DES, and 3DES were deprecated in a recent neutron-vpnaas
patch[1], leading functional-network tests to fail, because it was still
using the deprecated algorithms when creating IKEPolicies and
IPSecPolicies.

[1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/982383
@github-actions github-actions Bot added edit:networking This PR updates networking code v2 This PR targets v2 labels May 20, 2026
@github-actions github-actions Bot added the semver:patch No API change label May 20, 2026
@coveralls

coveralls commented May 20, 2026

Copy link
Copy Markdown

Coverage Status

coverage: 63.818% (-0.005%) from 63.823% — bp-v2-9be9846 into v2

@kayrus kayrus mentioned this pull request May 20, 2026
Merged
@winiciusallan

winiciusallan commented May 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

@kayrus I haven't found anything related to the CI error. No new change against master on neutron-* repositories looks like related to this. I've spun up a devstack environment locally and it worked fine.

there is some log entries about timeout on message reply (maybe a rabbitq issue...?)

journal.log:48382:May 20 11:49:08.887687 runnervmrw5os neutron-bgp-dragent[81284]: ERROR neutron_dynamic_routing.services.bgp.agent.bgp_dragent oslo_messaging.exceptions.MessagingTimeout: Timed out waiting for a reply to message ID 28772f0bd2d145cfb567eab0b07d3265

also some errors regarding ML2 drivers, not sure if it has some impact.

let's try to recheck it?

@kayrus

kayrus commented May 20, 2026

Copy link
Copy Markdown
Contributor

I'm out for today. Will try to find some time tomorrow.

@winiciusallan

winiciusallan commented May 20, 2026

Copy link
Copy Markdown
Contributor

I'm out for today. Will try to find some time tomorrow.

That's fine. Good rest!

@kayrus

kayrus commented May 21, 2026

Copy link
Copy Markdown
Contributor

there's a new bug report opened https://bugs.launchpad.net/neutron/+bug/2153536

kayrus
kayrus approved these changes May 21, 2026
View reviewed changes

@kayrus kayrus left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

anyway, this fix is relevant, let's merge it.

@kayrus
kayrus merged commit 06033fb into v2 May 21, 2026
24 of 28 checks passed
@kayrus
kayrus deleted the bp-v2-9be9846 branch May 21, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mandre mandre mandre approved these changes
@kayrus kayrus kayrus approved these changes

Assignees

No one assigned

Labels

edit:networking This PR updates networking code semver:patch No API change v2 This PR targets v2

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@coveralls @winiciusallan @kayrus @mandre