adoptium / adoptium/aqa-tests

jdk_security3 test failed with wrong checksum and No trusted certificate errors

Open
#2,123 11 comments 0 reactions 0 assignees View on GitHub
bug triage required type:openjdk
Dominant language
HTML
Stars
155
Forks
346
Avg merge
2d 9h
Merged PRs (30d)
36

Description

jdk_security3 test got two sub-tests failure for both hotspot and openj9, with all jdk versions:
- VerifyCACerts failed with wrong checksum error, with detailed error information as follows:
```
Execution failed: `main' threw exception: java.lang.Exception: At least one cacert test failed.
ERROR: wrong checksum
50:45:B0:D4:2D:46:E2:91:D0:F2:C9:A7:CB:77:45:14:41:63:A2:EF:BD:A9:F4:01:96:F6:7B:42:B2:29:7F:71
Expected checksum
84:BB:36:9E:B0:07:A7:C5:7F:38:EC:36:82:5C:0F:46:C0:35:3B:B1:1F:06:C2:D0:47:B9:39:FA:87:64:E5:9D
ERROR: 138 entries, should be 95
ERROR: camerfirmachambersignca [jdk] is not in cacerts
ERROR: thawteprimaryrootcag2 [jdk] is not in cacerts
...
java.lang.Exception: At least one cacert test failed
at VerifyCACerts.main(VerifyCACerts.java:365)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at com.sun.javatest.regtest.agent.MainActionHelper$AgentVMRunnable.run(MainActionHelper.java:312)
at java.base/java.lang.Thread.run(Thread.java:834)

JavaTest Message: Test threw exception: java.lang.Exception
JavaTest Message: shutting down test
```
- Distrust test failed with the error of `No trusted certificate found`, with detailed infomation:
```
Execution failed: `main' threw exception: java.lang.Exception: Unexpected exception: sun.security.validator.ValidatorException: No trusted certificate found.
Testing verisignclass3g3ca
java.lang.Exception: Unexpected exception: sun.security.validator.ValidatorException: No trusted certificate found
at Distrust.testTM(Distrust.java:190)
at Distrust.main(Distrust.java:114)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
at java.base/java.lang.Thread.run(Thread.java:834)

JavaTest Message: Test threw exception: java.lang.Exception: Unexpected exception: sun.security.validator.ValidatorException: No trusted certificate found
JavaTest Message: shutting down test
```
Related Issue: https://github.com/eclipse/openj9/issues/10757

Contributor guide

Open the contributing guide

Research direction

Start with the jdk_security3 test and the stack traces in VerifyCACerts.java and Distrust.java, then review the related OpenJ9 issue for context. Reproduce the failures across the affected HotSpot and OpenJ9 JDK versions; done means both sub-tests pass without checksum or trusted-certificate errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security, testing-qa
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.