-
Notifications
You must be signed in to change notification settings - Fork 171
8341946: [8u] sun/security/pkcs11/ec/ tests fail on RHEL9 #594
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
👋 Welcome back kurashige23! A progress list of the required criteria for merging this PR into |
|
@kurashige23 This change now passes all automated pre-integration checks. After integration, the commit message for the final commit will be: You can use pull request commands such as /summary, /contributor and /issue to adjust it as needed. At the time when this comment was updated there had been 51 new commits pushed to the
As there are no conflicts, your changes will automatically be rebased on top of these commits when integrating. If you prefer to avoid this automatic rebasing, please check the documentation for the /integrate command for further details. As you do not have Committer status in this project an existing Committer must agree to sponsor your change. Possible candidates are the reviewers of this PR (@phohensee) but any other Committer may sponsor as well. ➡️ To flag this PR as ready for integration with the above commit message, type |
|
Could anyone review this backport please? |
|
|
|
/approval request Fix the test failure in TestECDH.java, TestECDSA.java and TestECGenSpec.java on RHEL9. Risk is low, test-only fix. pkcs11 tests on RHEL9 and GHA tests pass. |
|
@kurashige23 |
|
If you have time, I would like you to confirm my fix request. |
|
@gnu-andrew, would you please take a look? |
|
@gnu-andrew |
|
@kurashige23 This pull request has been inactive for more than 4 weeks and will be automatically closed if another 4 weeks passes without any activity. To avoid this, simply add a new comment to the pull request. Feel free to ask for assistance if you need help with progressing this pull request towards integration! |
|
Comment to avoid automatic close. |
|
@kurashige23 This pull request has been inactive for more than 4 weeks and will be automatically closed if another 4 weeks passes without any activity. To avoid this, simply add a new comment to the pull request. Feel free to ask for assistance if you need help with progressing this pull request towards integration! |
|
I'm sorry, but if you have time, I would appreciate it if you could check it. |
|
@kurashige23 This pull request has been inactive for more than 4 weeks and will be automatically closed if another 4 weeks passes without any activity. To avoid this, simply add a new comment to the pull request. Feel free to ask for assistance if you need help with progressing this pull request towards integration! |
|
I apologize for the inconvenience, but I would appreciate it if you could take a moment to review this fix. |
|
/integrate |
|
@kurashige23 |
|
/sponsor |
|
Going to push as commit 84576a9.
Your commit was automatically rebased without conflicts. |
|
@phohensee @kurashige23 Pushed as commit 84576a9. 💡 You may see a message that your pull request was closed with unmerged commits. This can be safely ignored. |
The following tests fail when they cannot find the NSS version information, because the initial value of nss_ecc_status is ECCState.Extended and tries to use the EC algorithm not supported in ECCState.Basic,
sun/security/pkcs11/ec/TestECDH.java
sun/security/pkcs11/ec/TestECDSA.java
sun/security/pkcs11/ec/TestECGenSpec.java
To resolve these failures, change the initial value of nss_ecc_status from ECCState.Extended to ECCState.Basic.
Similar fix was made in JDK-8253637 for jdk16 and later, and JDK-8328889 for jdk11.
JDK-8253637 and JDK-8313206 were done with versions higher than jdk8. For this reason, it is normal to do a backport, but do not backport to jdk11 or jdk8 because:
JDK-8253637
About jdk11
・The ECDHKeyAgreement.java diff contains enhancements that have not been applied to jdk11 and cannot be backported to jdk11.
・Since TestEC.java is now passed in jdk11 and has been removed from the ProblemList, there is no need to modify Problemlist.txt and TestEC.java.
・The fix for PKCS11Test.java has already been made in JDK-8313206.
About jdk8
・For the same reason as jdk11, the ECDHKeyAgreement.java diff is not applicable, and the TestEC.java and Problemlist.txt diffs need not be applied.
・All we need is a PKCS11Test.java fix to resolve 3 failures (TestECDH.java, TestECDSA.java and TestECGenSpec.java). It is appropriate to issue a new bug ID this time because the test to be solved is different from JDK-8253637.
JDK-8313206
In JDK-8313206, only jdk11 has the fix to the initial value of nss_ecc_status in PKCS11Test.java.
Since JDK-8313206 is a different topic than the one I want to solve this time, I think it is inappropriate to backport to solve 3 failures(TestECDH.java, TestECDSA.java and TestECGenSpec.java).
Thanks
Progress
Issue
Reviewers
Reviewing
Using
gitCheckout this PR locally:
$ git fetch https://git.openjdk.org/jdk8u-dev.git pull/594/head:pull/594$ git checkout pull/594Update a local copy of the PR:
$ git checkout pull/594$ git pull https://git.openjdk.org/jdk8u-dev.git pull/594/headUsing Skara CLI tools
Checkout this PR locally:
$ git pr checkout 594View PR using the GUI difftool:
$ git pr show -t 594Using diff file
Download this PR as a diff file:
https://git.openjdk.org/jdk8u-dev/pull/594.diff
Using Webrev
Link to Webrev Comment