[Bug 1688] New: 8017173 regression introduced in recent icedtea6 and icedtea7 releases

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1688

            Bug ID: 1688
           Summary: 8017173 regression introduced in recent icedtea6 and
                    icedtea7 releases
           Product: IcedTea
           Version: unspecified
          Hardware: x86_64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: IcedTea
          Assignee: gnu.andrew at redhat.com
          Reporter: jamie at ubuntu.com
                CC: unassigned at icedtea.classpath.org

The following bug was filed in Ubuntu against openjdk-6:
https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/1283828

"After upgrading the various openjdk-6-* packages to version
6b27-1.12.6-1ubuntu0.10.04.4 on our server, all incoming client connections
started failing with the following error message at the top of the stack dump
(on the client side).
javax.xml.ws.soap.SOAPFaultException: java.security.NoSuchAlgorithmException:
Cannot find any provider supporting RSA/ECB/OAEPPadding

(Previously we were running version 6b27-1.12.5-0ubuntu0.10.04.1 of the
packages without seeing this problem.)

comment #1:
It looks like this is the JDK 6 version of the JDK 7 problem described in:
   http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8017173

That bug was apparently fixed in JDK 7 by this one-line commit:
   http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c5d869453212

In the JDK6 upstream, it seems this patch is the one that introduced the
"OAEPPadding" string :
  
http://hg.openjdk.java.net/jdk6/jdk6/jdk/diff/f3d02dd3dee5/src/share/classes/com/sun/org/apache/xml/internal/security/algorithms/JCEMapper.java
(part of S6741606 "Integrate Apache Santuario"), but I haven't found any sign
that the fix from S88017173 is being backported to the JDK6 codeline
upstream....
"

Indeed, applying the patch in
http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/c5d869453212 resolves the
issue. This is known to affect at least 1.13.1 and 2.4.5. Note, the patch
includes a test case but in our openjdk-6 builds it didn't get run as part of
the testsuite. I did not investigate why, but it can be run manually with:
$ javac -XDignore.symbol.file GetInstance.java # GetInstance.java from patch
$ java GetInstance

A patched openjdk will exit with '0' while unpatched will throw the exception.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140227/4daf5faf/attachment.html