Some security tests consistantly failed on test-ibmcloud-ubuntu1604-x64-1
- Dominant language
- HTML
- Stars
- 155
- Forks
- 346
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 36
Description
Some security tests consistently failed on test-ibmcloud-ubuntu1604-x64-1 but instead of an infrastructure issue it might just be a test issue, which has not be enhanced to work for those machines.
[sun/security/pkcs11/KeyStore/CertChainRemoval.java.CertChainRemoval](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_KeyStore_CertChainRemoval/java/CertChainRemoval/)
[sun/security/pkcs11/KeyStore/ImportKeyToP12.java.ImportKeyToP12](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_KeyStore_ImportKeyToP12/java/ImportKeyToP12/)
[sun/security/pkcs11/Mac/PBAMac.java.PBAMac](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_Mac_PBAMac/java/PBAMac/)
[sun/security/pkcs11/SecretKeyFactory/TestPBKD.java.TestPBKD](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_SecretKeyFactory_TestPBKD/java/TestPBKD/)
Except of CertChainRemoval.java all others failed with 'java.security.NoSuchAlgorithmException: no such algorithm: HmacPBESHA224 for provider SunPKCS11-NSS'
rerun on a former passed machine https://ci.adoptium.net/job/Grinder/7538/ passed
rerun on failed machine test-ibmcloud-ubuntu1604-x64-1 https://ci.adoptium.net/job/Grinder/7539/: Failed.
Action: difference between test-ibmcloud-ubuntu1604-x64-1 and others.
Also note in https://bugs.openjdk.org/browse/JDK-8301553, it mentioned:
PKCS https://github.com/adoptium/aqa-tests/pull/12 General Method for Password Integrity
HmacPBESHA1
HmacPBESHA224 (*)
HmacPBESHA256 (*)
HmacPBESHA384 (*)
HmacPBESHA512 (*)
(*) Note: neither the current PKCS https://github.com/adoptium/aqa-tests/issues/11 standard (v3.0) nor the previous one (v2.40) define mechanisms for these algorithms. Until a future revision of the standard introduces these mechanisms, NSS vendor-specific constants will be used. Thus, non-NSS tokens will probably not support these algorithms.
Contributor guide
Research direction
Start with the four linked security tests and compare the passed Grinder/7538 run with the failed Grinder/7539 run on test-ibmcloud-ubuntu1604-x64-1. Investigate the SunPKCS11-NSS HmacPBESHA224 NoSuchAlgorithmException and the machine differences. Done means determining whether the failures are infrastructure-specific or require test changes, then documenting or applying the appropriate fix.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, linux, ubuntu
- Domain
- operating-systems, security, testing
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100