SNOW-3449105 add Reset for ArrowStreamBatch method (mirror of #1782) #1792
+456
−35
jenkins-snowflake-github-app-3 / Jenkins
failed
May 14, 2026 in 57m 11s
Test Revocation Validation: error in 'sh' step
Test Revocation Validation / Test Revocation Validation / Shell Script
Error in sh step, with arguments #!/bin/bash -e chmod +x $WORKSPACE/ci/test_revocation.sh $WORKSPACE/ci/test_revocation.sh .
script returned exit code 1
Build log
Build log truncated.
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Universal OCSP: Added CA Bridge CA (SubjectKeyId: 1980b908a462452340fee187dc9ffad6eefc0b20)"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Universal OCSP: Added CA CA L (SubjectKeyId: 03343ac577527010393e5f0691dbb10345af0748)"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Universal OCSP: Added CA CA N (SubjectKeyId: 3ec1d128f97d1ccdb6ff88f79b4833824efe97bf)"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Successfully created universal revocation server with 6 CA certificates"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Starting OCSP server on port 42379, CRL server on port 40939"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Registered OCSP handler for path: /ocsp"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Registered OCSP subtree handler for path: /ocsp/"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.406Z level=DEBUG msg="Registering dynamic CRL endpoints: [/crl/1e66c20abbb5aa25340880feb35f4b84b9a16aff3926b85e6fb7241754cde048.crl /crl/97ce22ba606f60fa8ca5e0c893b5265f40573cbbf67cab5c46de60dd3a86cf82.crl /crl/3773289aad72b8ec4c9d8ab39a0a53df8155091da94a8a8bd446c3fd97fd1fad.crl /crl/0c7f2939ae6979dab706978bc09027a948e9245566115c20936e788c82d24f19.crl /crl/ec37f685ac18a34ba234d4ad25257c21d01771c2457b41d88aefdb4267b39cb2.crl]"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/1e66c20abbb5aa25340880feb35f4b84b9a16aff3926b85e6fb7241754cde048.crl"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/97ce22ba606f60fa8ca5e0c893b5265f40573cbbf67cab5c46de60dd3a86cf82.crl"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/3773289aad72b8ec4c9d8ab39a0a53df8155091da94a8a8bd446c3fd97fd1fad.crl"
[2026-05-14T12:27:55.618Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/0c7f2939ae6979dab706978bc09027a948e9245566115c20936e788c82d24f19.crl"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/ec37f685ac18a34ba234d4ad25257c21d01771c2457b41d88aefdb4267b39cb2.crl"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="CRL server listening on :40939"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.407Z level=DEBUG msg="OCSP server listening on :42379"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.508Z level=DEBUG msg="Loading server certificate for revocation: server"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.508Z level=DEBUG msg="Revocation services already configured during infrastructure setup for scenario pathbuilding_bridge_ca_broken_cross_signing (OCSP: true, CRL: true)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.508Z level=DEBUG msg="Phase 1: Testing valid certificate for SnowflakeClient-OCSP scenario Path Building: Bridge CA Broken Cross-Signing Failure"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.508Z level=DEBUG msg="****CertificatePhase called for scenario pathbuilding_bridge_ca_broken_cross_signing, phase valid_certificate"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.509Z level=DEBUG msg="Using server certificate for scenario pathbuilding_bridge_ca_broken_cross_signing: server"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.509Z level=DEBUG msg="Building certificate bundle with intermediate roles: [ca_n ca_l bridge_ca] (from server chain: [server ca_n ca_l bridge_ca])"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.509Z level=DEBUG msg="Created certificate bundle: /tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/pathbuilding_bridge_ca_broken_cross_signing-intermediate-bundle.crt (4583 bytes)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.509Z level=DEBUG msg="TLS Config: Loaded 1 server certificates from /tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/bettertls_bridge_ca_server.crt"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: Loaded 3 certificates from intermediate bundle /tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/pathbuilding_bridge_ca_broken_cross_signing-intermediate-bundle.crt"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: [0] Subject: CN=CA N,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: [1] Subject: CN=CA L,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: [2] Subject: CN=Bridge CA,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: Created single certificate chain with 4 certificates"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.510Z level=DEBUG msg="TLS Config: Built TLS configuration with 1 certificate entries"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.610Z level=DEBUG msg="=== Certificate Chain Inspector ==="
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.610Z level=DEBUG msg="Connecting to localhost:42753 to inspect server certificate chain..."
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg="Server presented 4 certificate(s):"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [0] Subject: CN=End Entity,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Issuer: CN=CA N,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Serial: 218475281989576724610168516985575076438"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Type: End-Entity Certificate"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" OCSP: [http://127.0.0.1:42379/ocsp]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" CRL: [http://127.0.0.1:40939/crl/3773289aad72b8ec4c9d8ab39a0a53df8155091da94a8a8bd446c3fd97fd1fad.crl]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=""
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [1] Subject: CN=CA N,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Issuer: CN=CA L,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Serial: 332629768454851378444902269780773743865"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" OCSP: [http://127.0.0.1:42379/ocsp]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" CRL: [http://127.0.0.1:40939/crl/97ce22ba606f60fa8ca5e0c893b5265f40573cbbf67cab5c46de60dd3a86cf82.crl]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=""
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [2] Subject: CN=CA L,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Issuer: CN=Bridge CA,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Serial: 232344232711876144496740833616079327415"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" OCSP: [http://127.0.0.1:42379/ocsp]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" CRL: [http://127.0.0.1:40939/crl/1e66c20abbb5aa25340880feb35f4b84b9a16aff3926b85e6fb7241754cde048.crl]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=""
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [3] Subject: CN=Bridge CA,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Issuer: CN=Trust Anchor Z,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Serial: 123801010427442398029718117704976054433"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" OCSP: [http://127.0.0.1:42379/ocsp]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" CRL: [http://127.0.0.1:40939/crl/ec37f685ac18a34ba234d4ad25257c21d01771c2457b41d88aefdb4267b39cb2.crl]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=""
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg="Certificate chain structure:"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [0] End Entity"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" ↓ (signed by)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [1] CA N"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [1] CA N"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" ↓ (signed by)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [2] CA L"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [2] CA L"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" ↓ (signed by)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg=" [3] Bridge CA"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.613Z level=DEBUG msg="=== End Certificate Chain Inspection ==="
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Created trust store bundle for scenario pathbuilding_bridge_ca_broken_cross_signing: 1 paths: [/tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/bettertls_bridge_ca_ta_x.crt]"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Starting connection **** with CA=/tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/bettertls_bridge_ca_ta_x.crt host=localhost port=42753"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Loading CA certificate from: /tmp/revocation-validation-4135464200/pathbuilding_bridge_ca_broken_cross_signing_9bfe381d7b435e55/bettertls_bridge_ca_ta_x.crt"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Loaded CA certificate (1265 bytes)"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Successfully added CA certificate to pool"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Created TLS config with custom CA and verification enabled"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Generated TLS config name: revocation-****-1778761675614143285"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614228094Z level=INFO source=tls_config.go:24 msg="Registering TLS config for key: revocation-****-1778761675614143285"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Successfully registered TLS config with Snowflake driver"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Registered TLS config: revocation-****-1778761675614143285"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Building direct DSN with tlsConfigName=revocation-****-1778761675614143285 host=localhost port=42753"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Set timeouts: loginTimeout=10s requestTimeout=10s"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Set maxRetryCount=1 for fast-fail behavior"
[2026-05-14T12:27:55.619Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Set account=****-account"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Using custom TLS config: revocation-****-1778761675614143285"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Using OCSP revocation mode (ocspFailOpen=false, disableOCSPChecks=false, checkMode=strict)"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Disabled OCSP cache server via SF_OCSP_RESPONSE_CACHE_SERVER_ENABLED=false"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Set protocol=https"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Disabled telemetry"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Final direct DSN (masked password): ****user:****@localhost:42753/****db?account=****-account&..."
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Built direct DSN: ****user:****pass@localhost:42753/****db?account=****-account&disableOCSPChecks=false&disableTelemetry=true&loginTimeout=10&maxRetryCount=1&ocspFailOpen=false&protocol=https&requestTimeout=10&tlsConfigName=revocation-****-1778761675614143285"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Opening database connection with direct host:port DSN"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614450626Z level=INFO source=dsn.go:728 msg="Query String: account=****-account&disableOCSPChecks=false&disableTelemetry=true&loginTimeout=10&maxRetryCount=1&ocspFailOpen=false&protocol=https&requestTimeout=10&tlsConfigName=revocation-****-1778761675614143285\n"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614Z level=DEBUG msg="Attempting to ping database (timeout: 10s)"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614506605Z level=INFO source=driver.go:63 msg=OpenWithConfig
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614566743Z level=INFO source=easy_logging.go:45 msg="Skipping Easy Logging initialization as it is not allowed to initialize"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614689366Z level=DEBUG source=connection.go:617 msg="Building snowflakeConn: host: localhost, account: ****-account, user: ****user, password **** true, role: , database: ****db, schema: , warehouse: , proxy was not configured"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614735883Z level=DEBUG source=transport.go:204 msg="createTransport: will perform OCSP validation"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.61476261Z level=DEBUG source=ocsp.go:179 msg="initializing OCSP module"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614840462Z level=DEBUG source=ocsp.go:189 msg="Using not global host (localhost), setting up OCSP cache server to http://ocsp.localhost/ocsp_response_cache.json"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.6149271Z level=DEBUG source=transport.go:99 msg="Create a new Base Transport with transportConfig {MaxIdleConns: 3, IdleConnTimeout: 30m0s, DialTimeout: 30s, KeepAlive: 0s}"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.614956972Z level=DEBUG source=transport.go:68 msg="Initializing proxy configuration"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615017593Z level=DEBUG source=transport.go:70 msg="Config is empty or ProxyHost is not set. Using proxy settings from environment variables."
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615052614Z level=INFO source=driver.go:82 msg="Connecting to GLOBAL Snowflake domain"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615088826Z level=INFO source=auth.go:726 msg="Authenticating via SNOWFLAKE"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615162516Z level=DEBUG source=platform_detection.go:53 msg="getDetectedPlatforms: waiting for platform detection to complete"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615222567Z level=DEBUG source=platform_detection.go:55 msg="getDetectedPlatforms: returning cached detected platforms: [is_ec2_instance]"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615345956Z level=INFO source=auth.go:329 msg="Information for Auth: Host: localhost, User: ****user, Authenticator: SNOWFLAKE, Params: &map[databaseName:[****db]], Protocol: https, Port: 42753, LoginTimeout: 10s"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615468463Z level=INFO source=auth.go:187 msg="full URL: https://localhost:42753/session/v1/login-request?databaseName=****db&requestId=aefb0619-de1c-4d02-518e-2dfa2e8e2e57&request_guid=a9566286-0300-462a-629a-16796022c649"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615501538Z level=DEBUG source=retry.go:298 msg="retryHTTP.totalTimeout: 10s"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615522042Z level=DEBUG source=retry.go:309 msg="retry count: 0"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615548323Z level=DEBUG source=auth.go:483 msg="Username and password"
[2026-05-14T12:27:55.620Z] time=2026-05-14T12:27:55.615627796Z level=DEBUG source=auth.go:541 msg="Request body is created for the authentication. Authenticator: SNOWFLAKE, User: ****user, Account: ****-account"
[2026-05-14T12:27:55.920Z] time=2026-05-14T12:27:55.618Z level=DEBUG msg="HTTP Server TLS: http: TLS handshake error from 127.0.0.1:48946: remote error: tls: bad certificate"
[2026-05-14T12:27:55.920Z] time=2026-05-14T12:27:55.618831177Z level=DEBUG source=retry.go:332 msg="Request to localhost:42753 - response received after milliseconds 3.22251ms with status ."
[2026-05-14T12:27:55.920Z] time=2026-05-14T12:27:55.61955115Z level=WARN source=retry.go:335 msg="failed http connection. err: Post \"https://localhost:42753/session/v1/login-request?databaseName=****db&requestId=aefb0619-de1c-4d02-518e-2dfa2e8e2e57&request_guid=a9566286-0300-462a-629a-16796022c649\": tls: failed to verify certificate: x509: certificate signed by unknown authority. retrying...\n"
[2026-05-14T12:27:55.920Z] time=2026-05-14T12:27:55.619655881Z level=DEBUG source=retry.go:380 msg="sleeping 1.263904437s. to timeout: 8.736095563s. retrying"
[2026-05-14T12:27:55.920Z] time=2026-05-14T12:27:55.619691295Z level=DEBUG source=retry.go:381 msg="retry count: 1, retry reason: 0"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.884260679Z level=DEBUG source=retry.go:309 msg="retry count: 1"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.884325543Z level=DEBUG source=auth.go:483 msg="Username and password"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.884412456Z level=DEBUG source=auth.go:541 msg="Request body is created for the authentication. Authenticator: SNOWFLAKE, User: ****user, Account: ****-account"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.887Z level=DEBUG msg="HTTP Server TLS: http: TLS handshake error from 127.0.0.1:48954: remote error: tls: bad certificate"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.887912656Z level=DEBUG source=retry.go:332 msg="Request to localhost:42753 - response received after milliseconds 3.596059ms with status ."
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.88811874Z level=WARN source=retry.go:335 msg="failed http connection. err: Post \"https://localhost:42753/session/v1/login-request?databaseName=****db&requestId=aefb0619-de1c-4d02-518e-2dfa2e8e2e57&request_guid=6d460857-d8c7-4ed6-5985-65d9e9b80493\": tls: failed to verify certificate: x509: certificate signed by unknown authority. retrying...\n"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.888165014Z level=DEBUG source=connection.go:288 msg="Snowflake connection closing."
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.888236344Z level=ERROR source=driver.go:86 msg="Failed to authenticate. Connection failed after 1.273687413s milliseconds"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.888Z level=DEBUG msg="Ping failed with error: Post \"https://localhost:42753/session/v1/login-request?databaseName=****db&requestId=aefb0619-de1c-4d02-518e-2dfa2e8e2e57&request_guid=6d460857-d8c7-4ed6-5985-65d9e9b80493\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.888Z level=DEBUG msg="Certificate error detected via string matching: certificate"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.888Z level=DEBUG msg="Certificate validation failed (unexpected)"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Skipping Phase 2 (revocation ****ing) for SnowflakeClient-OCSP scenario Path Building: Bridge CA Broken Cross-Signing Failure scenario is single-phase (no post_revocation specified)"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=INFO msg="MEMORY_PROFILE[SnowflakeClient-OCSP_pathbuilding_bridge_ca_broken_cross_signing]: Duration=1.500063134s, Samples=4, RSS_Peak=29664KB, RSS_Avg=29040KB, Heap_Peak=1957KB, Heap_Avg=1928KB, GC_Cycles=4, GC_CPU=0.07%"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Worker 1 processing scenario Path Building: Figure Seven No Valid Path Failure for client SnowflakeClient-OCSP"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Set Snowflake driver log level to: debug"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Configured gosnowflake OcspMaxRetryCount=0 (fast-fail)"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Created scenario-specific Snowflake client for pathbuilding_figure_seven_no_path preserving method ocsp with check mode strict"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.889Z level=DEBUG msg="Starting memory monitoring for scenario pathbuilding_figure_seven_no_path with client SnowflakeClient-OCSP"
[2026-05-14T12:27:56.891Z] time=2026-05-14T12:27:56.890Z level=DEBUG msg="Using localhost for SAN/AIA/CDP"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Certificates expect these CRL endpoints: [/crl/d928ac61dd98fcb49c3b9b9bcba7873c6365f834157bd62598c338bb9bdfec9a.crl /crl/9be4133e6845489061a6086a96cbb3ba372b55d0cc16de10606051a947cd698d.crl /crl/61a8d8afe3750e29ab9af00f2827fa799a7d487cb1f6929114e16e226010f039.crl /crl/42723071e9e2a7d47002c99cf4f921fc363c5f2d6b6b647244b17b5d6bbe0d3b.crl]"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Certificates expect these OCSP endpoints: [/ocsp]"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="OCSP Setup: structure=bettertls_figure_seven, using dynamic revocation server creation"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Added CA to universal responder: trust_anchor"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Added CA to universal responder: ca_a"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Added CA to universal responder: ca_c"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Added CA to universal responder: ca_b"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.341Z level=DEBUG msg="Added cross-signed CA to universal responder: ca_b_cross_signed_by_c"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.342Z level=DEBUG msg="Universal OCSP: Added CA Trust Anchor (SubjectKeyId: 868fc921e6b5d2e9414dda483f0436b32e42c2f2)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.342Z level=DEBUG msg="Universal OCSP: Added CA CA A (SubjectKeyId: a2d52e634dcf3e61b810736ba2bd592d5c3231ef)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.342Z level=DEBUG msg="Universal OCSP: Added CA CA C (SubjectKeyId: 8640fb4d8ff58b7c5272a71b88eceb3a35b8493e)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.342Z level=DEBUG msg="Universal OCSP: Added CA CA B (SubjectKeyId: 8f5be797fdae6997ed994d7c9717fcaa6154b463)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.342Z level=DEBUG msg="Universal OCSP: Added CA CA B (SubjectKeyId: 8f5be797fdae6997ed994d7c9717fcaa6154b463)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Successfully created universal revocation server with 5 CA certificates"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Starting OCSP server on port 41593, CRL server on port 40993"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered OCSP handler for path: /ocsp"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered OCSP subtree handler for path: /ocsp/"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registering dynamic CRL endpoints: [/crl/d928ac61dd98fcb49c3b9b9bcba7873c6365f834157bd62598c338bb9bdfec9a.crl /crl/9be4133e6845489061a6086a96cbb3ba372b55d0cc16de10606051a947cd698d.crl /crl/61a8d8afe3750e29ab9af00f2827fa799a7d487cb1f6929114e16e226010f039.crl /crl/42723071e9e2a7d47002c99cf4f921fc363c5f2d6b6b647244b17b5d6bbe0d3b.crl]"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/d928ac61dd98fcb49c3b9b9bcba7873c6365f834157bd62598c338bb9bdfec9a.crl"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/9be4133e6845489061a6086a96cbb3ba372b55d0cc16de10606051a947cd698d.crl"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/61a8d8afe3750e29ab9af00f2827fa799a7d487cb1f6929114e16e226010f039.crl"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="Registered CRL handler for endpoint: /crl/42723071e9e2a7d47002c99cf4f921fc363c5f2d6b6b647244b17b5d6bbe0d3b.crl"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="CRL server listening on :40993"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.343Z level=DEBUG msg="OCSP server listening on :41593"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.445Z level=DEBUG msg="Loading server certificate for revocation: server"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.445Z level=DEBUG msg="Revocation services already configured during infrastructure setup for scenario pathbuilding_figure_seven_no_path (OCSP: true, CRL: true)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.445Z level=DEBUG msg="Phase 1: Testing valid certificate for SnowflakeClient-OCSP scenario Path Building: Figure Seven No Valid Path Failure"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.445Z level=DEBUG msg="****CertificatePhase called for scenario pathbuilding_figure_seven_no_path, phase valid_certificate"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="Using server certificate for scenario pathbuilding_figure_seven_no_path: server"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="Building certificate bundle with intermediate roles: [ca_b ca_a ca_c] (from server chain: [server ca_b ca_a ca_c])"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="Created certificate bundle: /tmp/revocation-validation-4135464200/pathbuilding_figure_seven_no_path_4a97bd663b3f0778/pathbuilding_figure_seven_no_path-intermediate-bundle.crt (4579 bytes)"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: Loaded 1 server certificates from /tmp/revocation-validation-4135464200/pathbuilding_figure_seven_no_path_4a97bd663b3f0778/bettertls_figure_seven_server.crt"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: Loaded 3 certificates from intermediate bundle /tmp/revocation-validation-4135464200/pathbuilding_figure_seven_no_path_4a97bd663b3f0778/pathbuilding_figure_seven_no_path-intermediate-bundle.crt"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: [0] Subject: CN=CA B,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: [1] Subject: CN=CA A,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: [2] Subject: CN=CA C,O=Test Organization,L=Test City,C=US, IsCA: true"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: Created single certificate chain with 4 certificates"
[2026-05-14T12:27:57.494Z] time=2026-05-14T12:27:57.446Z level=DEBUG msg="TLS Config: Built TLS configuration with 1 certificate entries"
[2026-05-14T12:27:57.791Z] time=2026-05-14T12:27:57.547Z level=DEBUG msg="=== Certificate Chain Inspector ==="
[2026-05-14T12:27:57.791Z] time=2026-05-14T12:27:57.547Z level=DEBUG msg="Connecting to localhost:44453 to inspect server certificate chain..."
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Server presented 4 certificate(s):"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [0] Subject: CN=End Entity,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Issuer: CN=CA B,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Serial: 259351011022036090180369023156901459123"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Type: End-Entity Certificate"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" OCSP: [http://127.0.0.1:41593/ocsp]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" CRL: [http://127.0.0.1:40993/crl/61a8d8afe3750e29ab9af00f2827fa799a7d487cb1f6929114e16e226010f039.crl]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=""
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [1] Subject: CN=CA B,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Issuer: CN=CA A,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Serial: 180223474093055752402560574565482894201"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" OCSP: [http://127.0.0.1:41593/ocsp]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" CRL: [http://127.0.0.1:40993/crl/9be4133e6845489061a6086a96cbb3ba372b55d0cc16de10606051a947cd698d.crl]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=""
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [2] Subject: CN=CA A,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Issuer: CN=Trust Anchor,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Serial: 168243873406409607938906936569744611348"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" OCSP: [http://127.0.0.1:41593/ocsp]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" CRL: [http://127.0.0.1:40993/crl/d928ac61dd98fcb49c3b9b9bcba7873c6365f834157bd62598c338bb9bdfec9a.crl]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=""
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [3] Subject: CN=CA C,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Issuer: CN=Trust Anchor,O=Test Organization,L=Test City,C=US"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Serial: 168322059988210856299682900948757207372"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" Type: CA Certificate"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" OCSP: [http://127.0.0.1:41593/ocsp]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" CRL: [http://127.0.0.1:40993/crl/d928ac61dd98fcb49c3b9b9bcba7873c6365f834157bd62598c338bb9bdfec9a.crl]"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=""
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Certificate chain structure:"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [0] End Entity"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" ↓ (signed by)"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [1] CA B"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [1] CA B"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" ↓ (signed by)"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg=" [2] CA A"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="=== End Certificate Chain Inspection ==="
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=WARN msg="Failed to get certificate path for role nonexistent_trust_anchor: certificate role 'nonexistent_trust_anchor' not found in structure 'bettertls_figure_seven'"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Created trust store bundle for scenario pathbuilding_figure_seven_no_path: 0 paths: []"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="No CA bundle provided; using system trust store"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Starting connection **** with CA= host=localhost port=44453"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="No CA certificate provided, using default TLS configuration"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Building direct DSN with tlsConfigName= host=localhost port=44453"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Set timeouts: loginTimeout=10s requestTimeout=10s"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Set maxRetryCount=1 for fast-fail behavior"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Set account=****-account"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="No custom TLS config specified"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Using OCSP revocation mode (ocspFailOpen=false, disableOCSPChecks=false, checkMode=strict)"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Disabled OCSP cache server via SF_OCSP_RESPONSE_CACHE_SERVER_ENABLED=false"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Set protocol=https"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Disabled telemetry"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Final direct DSN (masked password): ****user:****@localhost:44453/****db?account=****-account&..."
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Built direct DSN: ****user:****pass@localhost:44453/****db?account=****-account&disableOCSPChecks=false&disableTelemetry=true&loginTimeout=10&maxRetryCount=1&ocspFailOpen=false&protocol=https&requestTimeout=10"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Opening database connection with direct host:port DSN"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550951578Z level=INFO source=dsn.go:728 msg="Query String: account=****-account&disableOCSPChecks=false&disableTelemetry=true&loginTimeout=10&maxRetryCount=1&ocspFailOpen=false&protocol=https&requestTimeout=10\n"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.550Z level=DEBUG msg="Attempting to ping database (timeout: 10s)"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551014258Z level=INFO source=driver.go:63 msg=OpenWithConfig
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551075519Z level=INFO source=easy_logging.go:45 msg="Skipping Easy Logging initialization as it is not allowed to initialize"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551202759Z level=DEBUG source=connection.go:617 msg="Building snowflakeConn: host: localhost, account: ****-account, user: ****user, password **** true, role: , database: ****db, schema: , warehouse: , proxy was not configured"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551250978Z level=DEBUG source=transport.go:204 msg="createTransport: will perform OCSP validation"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551278197Z level=DEBUG source=ocsp.go:179 msg="initializing OCSP module"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551359902Z level=DEBUG source=ocsp.go:189 msg="Using not global host (localhost), setting up OCSP cache server to http://ocsp.localhost/ocsp_response_cache.json"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551453471Z level=DEBUG source=transport.go:99 msg="Create a new Base Transport with transportConfig {MaxIdleConns: 3, IdleConnTimeout: 30m0s, DialTimeout: 30s, KeepAlive: 0s}"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.55148357Z level=DEBUG source=transport.go:68 msg="Initializing proxy configuration"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551547501Z level=DEBUG source=transport.go:70 msg="Config is empty or ProxyHost is not set. Using proxy settings from environment variables."
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551583647Z level=INFO source=driver.go:82 msg="Connecting to GLOBAL Snowflake domain"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.55161735Z level=INFO source=auth.go:726 msg="Authenticating via SNOWFLAKE"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.55169322Z level=DEBUG source=platform_detection.go:53 msg="getDetectedPlatforms: waiting for platform detection to complete"
[2026-05-14T12:27:57.792Z] time=2026-05-14T12:27:57.551755217Z level=DEBUG source=platform_detection.go:55 msg="getDetectedPlatforms: returning cached detected platforms: [is_ec2_instance]"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.551883518Z level=INFO source=auth.go:329 msg="Information for Auth: Host: localhost, User: ****user, Authenticator: SNOWFLAKE, Params: &map[databaseName:[****db]], Protocol: https, Port: 44453, LoginTimeout: 10s"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.552011703Z level=INFO source=auth.go:187 msg="full URL: https://localhost:44453/session/v1/login-request?databaseName=****db&requestId=e2cd29f5-acef-400d-7a57-036cc822269f&request_guid=745ff8ff-4bc0-4b66-5e17-efa3864006a7"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.552044Z level=DEBUG source=retry.go:298 msg="retryHTTP.totalTimeout: 10s"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.552066051Z level=DEBUG source=retry.go:309 msg="retry count: 0"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.552093074Z level=DEBUG source=auth.go:483 msg="Username and password"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.552175932Z level=DEBUG source=auth.go:541 msg="Request body is created for the authentication. Authenticator: SNOWFLAKE, User: ****user, Account: ****-account"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.555Z level=DEBUG msg="HTTP Server TLS: http: TLS handshake error from 127.0.0.1:47382: remote error: tls: bad certificate"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.555380992Z level=DEBUG source=retry.go:332 msg="Request to localhost:44453 - response received after milliseconds 3.220014ms with status ."
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.555582923Z level=WARN source=retry.go:335 msg="failed http connection. err: Post \"https://localhost:44453/session/v1/login-request?databaseName=****db&requestId=e2cd29f5-acef-400d-7a57-036cc822269f&request_guid=745ff8ff-4bc0-4b66-5e17-efa3864006a7\": tls: failed to verify certificate: x509: certificate signed by unknown authority. retrying...\n"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.555649083Z level=DEBUG source=retry.go:380 msg="sleeping 1.784193252s. to timeout: 8.215806748s. retrying"
[2026-05-14T12:27:57.793Z] time=2026-05-14T12:27:57.55568272Z level=DEBUG source=retry.go:381 msg="retry count: 1, retry reason: 0"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.340626781Z level=DEBUG source=retry.go:309 msg="retry count: 1"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.340716655Z level=DEBUG source=auth.go:483 msg="Username and password"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.340802918Z level=DEBUG source=auth.go:541 msg="Request body is created for the authentication. Authenticator: SNOWFLAKE, User: ****user, Account: ****-account"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.343Z level=DEBUG msg="HTTP Server TLS: http: TLS handshake error from 127.0.0.1:36302: remote error: tls: bad certificate"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344101106Z level=DEBUG source=retry.go:332 msg="Request to localhost:44453 - response received after milliseconds 3.45465ms with status ."
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344304591Z level=WARN source=retry.go:335 msg="failed http connection. err: Post \"https://localhost:44453/session/v1/login-request?databaseName=****db&requestId=e2cd29f5-acef-400d-7a57-036cc822269f&request_guid=463e7da4-8164-4d8e-4b23-2eb676b3304a\": tls: failed to verify certificate: x509: certificate signed by unknown authority. retrying...\n"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344351144Z level=DEBUG source=connection.go:288 msg="Snowflake connection closing."
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344411366Z level=ERROR source=driver.go:86 msg="Failed to authenticate. Connection failed after 1.793368051s milliseconds"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344Z level=DEBUG msg="Ping failed with error: Post \"https://localhost:44453/session/v1/login-request?databaseName=****db&requestId=e2cd29f5-acef-400d-7a57-036cc822269f&request_guid=463e7da4-8164-4d8e-4b23-2eb676b3304a\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344Z level=DEBUG msg="Certificate error detected via string matching: certificate"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.344Z level=DEBUG msg="Certificate validation failed (expected - no CA certificate)"
[2026-05-14T12:27:59.728Z] time=2026-05-14T12:27:59.345Z level=DEBUG msg="Skipping Phase 2 (revocation ****ing) for SnowflakeClient-OCSP scenario Path Building: Figure Seven No Valid Path Failure scenario is single-phase (no post_revocation specified)"
[2026-05-14T12:27:59.729Z] time=2026-05-14T12:27:59.345Z level=INFO msg="MEMORY_PROFILE[SnowflakeClient-OCSP_pathbuilding_figure_seven_no_path]: Duration=2.00093248s, Samples=5, RSS_Peak=29456KB, RSS_Avg=28854KB, Heap_Peak=2439KB, Heap_Avg=2184KB, GC_Cycles=3, GC_CPU=0.07%"
[2026-05-14T12:27:59.729Z] time=2026-05-14T12:27:59.346Z level=DEBUG msg="Worker 1 finished"
[2026-05-14T12:27:59.729Z] time=2026-05-14T12:27:59.346Z level=INFO msg="Tests completed in 1m1.110224662s"
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] === Test Results ===
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Baseline: Empty CA Bundle [baseline_empty_ca]
[2026-05-14T12:27:59.729Z] Description: Baseline **** with empty CA certificates - should fail for all clients to verify TLS configuration is working
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (2.01s)
[2026-05-14T12:27:59.729Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP URL Only (No Stapling) [ocsp_only_no_stapling]
[2026-05-14T12:27:59.729Z] Description: Certificate contains only OCSP URL, server does not provide OCSP stapling - ****s direct OCSP queries
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (2.03s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP URL with Stapling [ocsp_only_with_stapling]
[2026-05-14T12:27:59.729Z] Description: Certificate contains OCSP URL and server provides OCSP stapling - ****s stapled OCSP response handling
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: CRL URL Only [crl_only]
[2026-05-14T12:27:59.729Z] Description: Certificate contains only CRL URL - ****s CRL-based revocation checking
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP + CRL Both Available [ocsp_crl_both_working]
[2026-05-14T12:27:59.729Z] Description: Certificate contains both OCSP and CRL URLs, both services working - ****s dual revocation method availability
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (2.32s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP + CRL (CRL Service Down) [ocsp_crl_crl_down]
[2026-05-14T12:27:59.729Z] Description: Certificate has both URLs but CRL service is down - ****s OCSP fallback behavior
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (1.97s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP + CRL (OCSP Service Down) [ocsp_crl_ocsp_down]
[2026-05-14T12:27:59.729Z] Description: Certificate has both URLs but OCSP service is down - ****s CRL fallback behavior
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Server Certificate Revoked (OCSP Detection) [server_cert_revoked_ocsp]
[2026-05-14T12:27:59.729Z] Description: Server certificate is initially revoked - should be detected via OCSP and blocked
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (1.97s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Server Certificate Revoked (CRL Detection) [server_cert_revoked_crl]
[2026-05-14T12:27:59.729Z] Description: Server certificate is initially revoked - should be detected via CRL and blocked
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: All Revocation Services Down (Soft Mode) [all_services_down_soft_mode]
[2026-05-14T12:27:59.729Z] Description: Both OCSP and CRL services unavailable, revocation checking in soft mode - should succeed due to soft failure
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: All Revocation Services Down (Strict Mode) [all_services_down_strict_mode]
[2026-05-14T12:27:59.729Z] Description: Both OCSP and CRL services unavailable, revocation checking in strict mode - should fail due to service unavailability
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP Stapling with Stale Response [ocsp_stapling_stale_response]
[2026-05-14T12:27:59.729Z] Description: Server provides OCSP stapling but with stale response - ****s handling of stale stapled responses
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: OCSP Stapling with Malformed Response [ocsp_stapling_malformed_response]
[2026-05-14T12:27:59.729Z] Description: Server provides OCSP stapling but with malformed response - ****s resilience to malformed stapled responses
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Slow Revocation Services [slow_revocation_services]
[2026-05-14T12:27:59.729Z] Description: OCSP and CRL services respond very slowly - ****s timeout and retry behavior
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Slow Revocation Services [slow_revocation_crl_services]
[2026-05-14T12:27:59.729Z] Description: CRL services respond very slowly - ****s timeout and retry behavior
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Slow Revocation Services [slow_revocation_ocsp_services]
[2026-05-14T12:27:59.729Z] Description: OCSP services respond very slowly - ****s timeout and retry behavior
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (2.57s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Multiple OCSP URLs with Failover [multiple_ocsp_urls_failover]
[2026-05-14T12:27:59.729Z] Description: Certificate has multiple OCSP URLs, primary fails but secondary succeeds - ****s OCSP URL failover
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: Server Chain: Intermediate Certificate Only Trusted [server_chain_intermediate_trusted]
[2026-05-14T12:27:59.729Z] Description: Server chain with intermediate certificate trusted directly instead of root CA - ****s intermediate-only trust stores
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (1.92s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: CRL-only Client Strict Mode (CRL Service Down) [crl_only_crl_down_strict]
[2026-05-14T12:27:59.729Z] Description: CRL required; CRL service down; strict mode — initial should fail
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: RFC Path Builder: Both Paths Valid [rfc_path_builder_both_paths_valid]
[2026-05-14T12:27:59.729Z] Description: Server presents single server certificate with both intermediates - client should build valid path to either root
[2026-05-14T12:27:59.729Z] Results:
[2026-05-14T12:27:59.729Z] PASS SnowflakeClient-OCSP (3.94s)
[2026-05-14T12:27:59.729Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.729Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.729Z]
[2026-05-14T12:27:59.729Z] Scenario: RFC Path Builder: Primary Intermediate Revoked [rfc_path_builder_primary_intermediate_revoked]
[2026-05-14T12:27:59.729Z] Description: Server cert signed by primary intermediate, but primary is revoked - should fail as server cert becomes invalid
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.92s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Path Builder: Cross-Signed Intermediate Revoked [rfc_path_builder_cross_intermediate_revoked]
[2026-05-14T12:27:59.730Z] Description: Server presents server cert with both intermediates, but cross-signed is revoked - client should use primary path
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (1.08s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Path Builder: Both Intermediates Revoked [rfc_path_builder_both_intermediates_revoked]
[2026-05-14T12:27:59.730Z] Description: Server presents server cert with both intermediates, but both are revoked - should fail as no valid path remains
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (3.04s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Path Builder: Primary Root Trusted Only [rfc_path_builder_primary_trust_only]
[2026-05-14T12:27:59.730Z] Description: Server presents server cert with both intermediates but client trusts only primary root - should succeed via primary path
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.51s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Path Builder: Cross-Signing Root Trusted Only [rfc_path_builder_cross_trust_only]
[2026-05-14T12:27:59.730Z] Description: Server cert signed by primary intermediate but client only trusts cross-signing root - should fail as no valid path exists
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (4.35s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Cross-Signed Server: Both Paths Valid [rfc_cross_signed_server_both_paths_valid]
[2026-05-14T12:27:59.730Z] Description: Server cert signed by cross-signed intermediate with both trust paths valid - should succeed
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.60s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Cross-Signed Server: Primary Root Trusted Only [rfc_cross_signed_server_primary_trust_only]
[2026-05-14T12:27:59.730Z] Description: Server cert signed by cross-signed intermediate but client only trusts primary root - should fail
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (3.75s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: RFC Cross-Signed Server: Cross-Signing Root Trusted Only [rfc_cross_signed_server_cross_trust_only]
[2026-05-14T12:27:59.730Z] Description: Server cert signed by cross-signed intermediate and client trusts cross-signing root - should succeed
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.22s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: AWS Starfield Bug - 4 Certificates (No Self-Signed Roots) [aws_starfield_cross_signing_with_starfield]
[2026-05-14T12:27:59.730Z] Description: Test with 4 certificates: server + 2 intermediates + no self-signed roots
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.97s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: AWS Starfield Cross-Signing Production Bug [aws_starfield_cross_signing_bug]
[2026-05-14T12:27:59.730Z] Description: Reproduces Python 3.14.1 OCSP validation bug: server presents 4-cert chain where early certificates form valid trust path but later certificates are signed by untrusted CA. Python 3.14.1 fails because it validates entire chain. Python 3.15.0 passes because it stops traversal at trusted certificate.
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.34s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z] Revoked cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Large CRL Memory Test [large_crl_memory_****]
[2026-05-14T12:27:59.730Z] Description: Certificate with large CRL (10k entries) - ****s CRL processing memory usage and performance
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] UNSUPPORTED SnowflakeClient-OCSP (0.00s)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Linear Chain Basic [pathbuilding_linear_basic]
[2026-05-14T12:27:59.730Z] Description: Basic linear certificate chain validation (bettertls inspired)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (0.73s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Dual Roots Primary [pathbuilding_dual_roots_primary]
[2026-05-14T12:27:59.730Z] Description: Dual root scenario trusting primary root (bettertls TWO_ROOTS)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (0.69s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Dual Roots Secondary [pathbuilding_dual_roots_secondary]
[2026-05-14T12:27:59.730Z] Description: Dual root scenario trusting secondary root (bettertls TWO_ROOTS)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] FAIL SnowflakeClient-OCSP (1.70s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected success but got error: connection failed: Post "https://localhost:42459/session/v1/login-request?databaseName=****db&requestId=765d9a60-5c1d-4f28-76b8-7a4735d1922d&request_guid=2636a4a6-f212-45f8-7496-6f639a9f414f": HTTP code is not OK. 404: 404 Not Found
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Figure Seven Basic [pathbuilding_figure_seven_basic]
[2026-05-14T12:27:59.730Z] Description: Complex branching topology from RFC 4158 Section 2.3 (bettertls FIGURE_SEVEN)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (0.70s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Bridge CA Basic [pathbuilding_bridge_ca_basic]
[2026-05-14T12:27:59.730Z] Description: Bridge CA topology from RFC 4158 Section 2.4 (bettertls BRIDGE_CA_PKI)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (0.84s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Bridge CA Cross Trust [pathbuilding_bridge_ca_cross_trust]
[2026-05-14T12:27:59.730Z] Description: Bridge CA with trust anchor X, requiring cross-certification path discovery
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (0.80s)
[2026-05-14T12:27:59.730Z] Valid cert: TLS succeeded; application failed as expected
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Dual Roots Untrusted Failure [pathbuilding_dual_roots_untrusted]
[2026-05-14T12:27:59.730Z] Description: Dual root scenario where client trusts neither root - should fail (bettertls negative ****)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.34s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Dual Roots Wrong Chain Failure [pathbuilding_dual_roots_wrong_chain]
[2026-05-14T12:27:59.730Z] Description: Dual root scenario presenting wrong chain for trusted root - should fail (bettertls negative ****)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.40s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Bridge CA Broken Cross-Signing Failure [pathbuilding_bridge_ca_broken_cross_signing]
[2026-05-14T12:27:59.730Z] Description: Bridge CA scenario where cross-signing path is broken - should fail (bettertls negative ****)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (1.93s)
[2026-05-14T12:27:59.730Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.730Z]
[2026-05-14T12:27:59.730Z] Scenario: Path Building: Figure Seven No Valid Path Failure [pathbuilding_figure_seven_no_path]
[2026-05-14T12:27:59.730Z] Description: Figure Seven topology where client trusts non-existent root - should fail (bettertls negative ****)
[2026-05-14T12:27:59.730Z] Results:
[2026-05-14T12:27:59.730Z] PASS SnowflakeClient-OCSP (2.46s)
[2026-05-14T12:27:59.731Z] Valid cert: Expected failure (certificate correctly rejected)
[2026-05-14T12:27:59.731Z] Test results saved to: /home/jenkins/workspace/gosnowflake_PR-1792/revocation-results.json
[2026-05-14T12:27:59.731Z] HTML report saved to: /home/jenkins/workspace/gosnowflake_PR-1792/revocation-report.html
[2026-05-14T12:27:59.731Z]
[2026-05-14T12:27:59.731Z] === Test Summary ===
[2026-05-14T12:27:59.731Z] Total Test Duration: 1m1.110224662s
[2026-05-14T12:27:59.731Z] Scenarios Tested: 41
[2026-05-14T12:27:59.731Z] Clients Tested: 1
[2026-05-14T12:27:59.731Z] Total Tests: 41
[2026-05-14T12:27:59.731Z] Client Performance:
[2026-05-14T12:27:59.731Z] SnowflakeClient-OCSP: 96.4% pass rate (27/28 supported), 1.49s avg
[2026-05-14T12:27:59.731Z] Pass: 27 | Fail: 1 | Unsupported: 13
[2026-05-14T12:27:59.731Z] Failed scenarios: pathbuilding_dual_roots_secondary
[2026-05-14T12:27:59.731Z] time=2026-05-14T12:27:59.351Z level=INFO msg="Exiting with code 1: 1 ****(s) failed for client SnowflakeClient-OCSP"
[2026-05-14T12:27:59.731Z] time=2026-05-14T12:27:59.351Z level=INFO msg="Cleaning up all cached virtual environments..."
[2026-05-14T12:27:59.731Z] time=2026-05-14T12:27:59.351Z level=INFO msg="Cleanup of cached virtual environments completed"
[2026-05-14T12:27:59.731Z] time=2026-05-14T12:27:59.351Z level=DEBUG msg="Cleaned up temporary work directory: /tmp/revocation-validation-4135464200"
[2026-05-14T12:27:59.731Z] exit status 1
Details
- checkout (12 sec)
- Authenticate Artifactory (8.5 sec)
- Test (9.5 sec)
- Test (56 min)
- Test Authentication (9.5 sec)
- Test Authentication (3 min 51 sec)
- Test WIF Auth (9.5 sec)
- Test WIF Auth (22 min)
- Test Revocation Validation (2 min 14 sec)
- Test Revocation Validation (2 min 4 sec)
Error: script returned exit code 1 - logs
- Test Revocation Validation (2 min 4 sec)
Loading