jetty / jetty/jetty.project

ConscryptModuleTest disabled on JDK 26 due to upstream Conscrypt incompatibility

Open
#14,856 0 comments 0 reactions 0 assignees View on GitHub
Build
Dominant language
Java
Stars
4.1k
Forks
2k
Avg merge
3d 56m
Merged PRs (30d)
48

Description

Conscrypt returns hard-coded obsolete signature algorithms (`SHA1withRSA`, `SHA1withECDSA`) which are rejected by JDK 26's new certificate checks in `SunX509KeyManagerImpl`.

The `ConscryptModuleTest` is temporarily disabled on JDK 26 until this is fixed upstream.

**Upstream issue:** https://github.com/google/conscrypt/issues/1486

**Test file:** `tests/test-distribution/test-distribution-common/src/test/java/org/eclipse/jetty/tests/distribution/ConscryptModuleTest.java`

Re-enable the test once Conscrypt releases a version that supports JDK 26's security policy.

Contributor guide

Open the contributing guide

Research direction

Inspect tests/test-distribution/test-distribution-common/src/test/java/org/eclipse/jetty/tests/distribution/ConscryptModuleTest.java and identify how it is disabled on JDK 26. Check upstream Conscrypt issue 1486 and re-enable the test once a compatible Conscrypt release is available, then run the test on JDK 26 to confirm it passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security, testing
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.