Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8228645

Don't run sun/security/pkcs11/Cipher/TestKATForGCM.java on buggy NSS solaris versions

    Details

      Backports

        Description

        sun/security/pkcs11/Cipher/TestKATForGCM.java was a new testcase added for JDK-8080462. Turns out that it can fail due to NSS issue on older solaris versions :

        javax.crypto.BadPaddingException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_ENCRYPTED_DATA_INVALID
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.handleException(P11AEADCipher.java:723)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.implDoFinal(P11AEADCipher.java:612)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.engineDoFinal(P11AEADCipher.java:524)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.engineDoFinal(P11AEADCipher.java:510)
        at java.base/javax.crypto.Cipher.doFinal(Cipher.java:2202)
        at TestKATForGCM.execute(TestKATForGCM.java:267)
        at TestKATForGCM.main(TestKATForGCM.java:317)
        at PKCS11Test.premain(PKCS11Test.java:180)
        at PKCS11Test.testNSS(PKCS11Test.java:560)
        at PKCS11Test.main(PKCS11Test.java:216)
        at TestKATForGCM.main(TestKATForGCM.java:303)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:566)
        at com.sun.javatest.regtest.agent.MainActionHelper$SameVMRunnable.run(MainActionHelper.java:229)
        at java.base/java.lang.Thread.run(Thread.java:834)
        Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_ENCRYPTED_DATA_INVALID
        at jdk.crypto.cryptoki/sun.security.pkcs11.wrapper.PKCS11.C_Decrypt(Native Method)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.implDoFinal(P11AEADCipher.java:605)
        ... 15 more

        I think it's best to have the test run on newer Solaris versions (i.e. 11.3 and later) - the NSS version on Solaris 11.3 is 3.251

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  coffeys Sean Coffey
                  Reporter:
                  coffeys Sean Coffey
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: