Remove the 192-bit EC test case

[JinhangZhang]

This patch eliminates the 192-bit EC test which causes exceptions
seen in issue #18320.

DefaultSignatureAlgorithm test was run in those Redhat OS based machines
in a non-FIPS mode, but with a FIPS version of openssl. So, a 192-bit
size of EC key pair generator is not allowed by the native code in a
FIPS version of openssl. The code path went to a replacement EC key-pair
generator Java implementation.

issue: eclipse-openj9/openj9#18320

[JinhangZhang]

@jasonkatonica @pshipton FYI

[pshipton]

If you are referring to an issue pls provide a link not just a number.
This should be added to the head stream (openj9-openjdk-jdk) first and then backported. If it doesn't apply to newer versions, pls explain.

[JinhangZhang]

If you are referring to an issue pls provide a link not just a number. This should be added to the head stream (openj9-openjdk-jdk) first and then backported. If it doesn't apply to newer versions, pls explain.

@pshipton This only happens at 11. Case 18320 is failed on this line of code. The size of 192 is not supported by a FIPS version of OpenSSL. This 192 size of EC key is not declared in other versions such as 17, 21 and next. For 11, the native code path will not be used, instead a java code will be used.

[keithc-ca]

Perhaps it makes more sense to just remove the 192-bit test from DefaultSignatureAlgorithm (or at least in FIPS mode)?

[JinhangZhang]

Perhaps it makes more sense to just remove the 192-bit test from DefaultSignatureAlgorithm (or at least in FIPS mode)?

Remove the 192-bit test to align with other versions makes sense to me.

[JinhangZhang]

Removed 192-bit test

[pshipton]

Isn't that just leaving the problem to be found by a customer?

[keithc-ca]

It's not clear that is the result: The failing test involves a replacement key-pair generator, not the one customers would be using.

[keithc-ca]

Please update the commit message and the description here to more accurately describe this change.

[JinhangZhang]

Please update the commit message and the description here to more accurately describe this change.

updated

[keithc-ca]

Please update the commit message and the description here to more accurately describe this change.

updated

This doesn't "implement" anything as the commit message and description say, instead it removes testing of a specific EC key size. Perhaps the summary should be (paraphrasing the last line and editing for grammar):

Remove test of 192-bit EC or consistency with other JDK versions

[JinhangZhang]

Please update the commit message and the description here to more accurately describe this change.

updated

This doesn't "implement" anything as the commit message and description say, instead it removes testing of a specific EC key size. Perhaps the summary should be (paraphrasing the last line and editing for grammar):

Remove test of 192-bit EC or consistency with other JDK versions

Updated

[keithc-ca]

Jenkins compile plinux jdk11

[keithc-ca]

All plinux build systems are offline.

[keithc-ca]

Jenkins compile zlinux jdk11