adoptium / adoptium/aqa-tests

Some security tests consistantly failed on test-ibmcloud-ubuntu1604-x64-1

Open
#4,770 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
155
Forks
346
Avg merge
2d 9h
Merged PRs (30d)
36

Description

Some security tests consistently failed on test-ibmcloud-ubuntu1604-x64-1 but instead of an infrastructure issue it might just be a test issue, which has not be enhanced to work for those machines.

[sun/security/pkcs11/KeyStore/CertChainRemoval.java.CertChainRemoval](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_KeyStore_CertChainRemoval/java/CertChainRemoval/)
[sun/security/pkcs11/KeyStore/ImportKeyToP12.java.ImportKeyToP12](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_KeyStore_ImportKeyToP12/java/ImportKeyToP12/)
[sun/security/pkcs11/Mac/PBAMac.java.PBAMac](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_Mac_PBAMac/java/PBAMac/)
[sun/security/pkcs11/SecretKeyFactory/TestPBKD.java.TestPBKD](https://ci.adoptium.net/job/Test_openjdk21_hs_extended.openjdk_x86-64_linux_testList_2/22/testReport/junit/sun_security_pkcs11_SecretKeyFactory_TestPBKD/java/TestPBKD/)
Except of CertChainRemoval.java all others failed with 'java.security.NoSuchAlgorithmException: no such algorithm: HmacPBESHA224 for provider SunPKCS11-NSS'

rerun on a former passed machine https://ci.adoptium.net/job/Grinder/7538/ passed
rerun on failed machine test-ibmcloud-ubuntu1604-x64-1 https://ci.adoptium.net/job/Grinder/7539/: Failed.

Action: difference between test-ibmcloud-ubuntu1604-x64-1 and others.

Also note in https://bugs.openjdk.org/browse/JDK-8301553, it mentioned:

PKCS https://github.com/adoptium/aqa-tests/pull/12 General Method for Password Integrity

HmacPBESHA1
HmacPBESHA224 (*)
HmacPBESHA256 (*)
HmacPBESHA384 (*)
HmacPBESHA512 (*)
(*) Note: neither the current PKCS https://github.com/adoptium/aqa-tests/issues/11 standard (v3.0) nor the previous one (v2.40) define mechanisms for these algorithms. Until a future revision of the standard introduces these mechanisms, NSS vendor-specific constants will be used. Thus, non-NSS tokens will probably not support these algorithms.

Contributor guide

Open the contributing guide

Research direction

Start with the four linked security tests and compare the passed Grinder/7538 run with the failed Grinder/7539 run on test-ibmcloud-ubuntu1604-x64-1. Investigate the SunPKCS11-NSS HmacPBESHA224 NoSuchAlgorithmException and the machine differences. Done means determining whether the failures are infrastructure-specific or require test changes, then documenting or applying the appropriate fix.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, linux, ubuntu
Domain
operating-systems, security, testing
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.