Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8229243

SunPKCS11-Solaris provider tests failing on Solaris 11.4

    Details

    • Subcomponent:
    • Resolved In Build:
      b18
    • CPU:
      generic
    • OS:
      solaris_11
    • Verification:
      Not verified

      Backports

        Description

        Newer versions of Solaris 11 seem to offer functionality at pkcs11 level which allows for extra pkcs11 testing.

        e.g. on Solaris 11.3, the following message is displayed:
        ====
        Beginning test run TestKATForGCM...
        Running test with provider SunPKCS11-Solaris (security manager disabled) ...
        Skip testing SunPKCS11-Solaris, no support for AES/GCM/NoPadding
        Completed test with provider SunPKCS11-Solaris (262 ms).
        ====

        On Solaris 11.4, the SunPKCS11-Solaris provider is not skipped:
        e.g.
        ====
        Beginning test run TestKATForGCM...
        Running test with provider SunPKCS11-Solaris (security manager disabled) ...
        Failed Test Vector: key=11754cd72aec309bf52f7687212e8957, iv=3c819d9a9bed087615030b65, pt=null,aad=null, ct=null, tag=250327c674aaf477aef2675748cf6971
        ====

        On Solaris 11.4, the following tests seem to fail :
        sun/security/pkcs11/Cipher/ReinitCipher.java
        sun/security/pkcs11/Cipher/Test4512704.java
        sun/security/pkcs11/Cipher/TestCICOWithGCM.java
        sun/security/pkcs11/Cipher/TestCICOWithGCMAndAAD.java
        sun/security/pkcs11/Cipher/TestGCMKeyAndIvCheck.java
        sun/security/pkcs11/Cipher/TestKATForGCM.java
        sun/security/pkcs11/Cipher/TestSymmCiphers.java
        sun/security/pkcs11/Cipher/TestSymmCiphersNoPad.java
        sun/security/pkcs11/Mac/MacSameTest.java
        sun/security/pkcs11/MessageDigest/ByteBuffers.java
        sun/security/pkcs11/ec/ReadCertificates.java

        Errors such as following are seen:

        ----------System.err:(611/41794)----------
        java.security.InvalidKeyException: Could not initialize cipher
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.implInit(P11AEADCipher.java:327)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.engineInit(P11AEADCipher.java:247)
        at java.base/javax.crypto.Cipher.init(Cipher.java:1445)
        at java.base/javax.crypto.Cipher.init(Cipher.java:1378)
        at TestKATForGCM.execute(TestKATForGCM.java:261)
        at TestKATForGCM.main(TestKATForGCM.java:318)
        at PKCS11Test.premain(PKCS11Test.java:183)
        at PKCS11Test.testDefault(PKCS11Test.java:270)
        at PKCS11Test.main(PKCS11Test.java:218)
        at TestKATForGCM.main(TestKATForGCM.java:303)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:567)
        at com.sun.javatest.regtest.agent.MainActionHelper$AgentVMRunnable.run(MainActionHelper.java:298)
        at java.base/java.lang.Thread.run(Thread.java:830)
        Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_MECHANISM_PARAM_INVALID
        at jdk.crypto.cryptoki/sun.security.pkcs11.wrapper.PKCS11.C_EncryptInit(Native Method)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.initialize(P11AEADCipher.java:394)
        at jdk.crypto.cryptoki/sun.security.pkcs11.P11AEADCipher.implInit(P11AEADCipher.java:325)
        ... 15 more

        Backports of PKCS11 v2.40 would also be impacted.

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  valeriep Valerie Peng
                  Reporter:
                  coffeys Sean Coffey
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  6 Start watching this issue

                  Dates

                  • Due:
                    Created:
                    Updated:
                    Resolved: