[jdk11u-dev] RFR: 8296631: NSS tests failing on OL9 linux-aarch64 hosts [v2]

[Andrew Haley]

On Thu, 17 Oct 2024 10:55:17 GMT, Taizo Kurashige <duke at openjdk.org> wrote:

>> Hi,
>> 
>> This is a backport of JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
>> 
>> Original patch does not apply cleanly for the following reasons:
>> 
>> ・Fix to getOsMap() in test/jdk/sun/security/pkcs11/PKCS11Test.java can not be applied since getOsMap() was removed in https://bugs.openjdk.org/browse/JDK-8331700.
>> ・Fix to test/jdk/sun/security/pkcs11/tls/tls12 can not be applied since test/jdk/sun/security/pkcs11/tls/tls12 is an enhancement added in [https://bugs.openjdk.org/browse/JDK-8220753](https://bugs.openjdk.org/browse/JDK-8220753%28jdk13%29) (jdk13).
>> ・pkcs11/fips/ClientJSSEServerJSSE.java and pkcs11/fips/TrustManagerTest.java fail if I run the pkcs11 tests without the fix to test/jdk/sun/security/pkcs11/fips/. This is because cert9.db, key4.db, and pkcs11.txt, which are required to run the tests using sqlite, do not exist in test/jdk/sun/security/pkcs11/fips. test/jdk/sun/security/pkcs11/fips was removed in https://bugs.openjdk.org/browse/JDK-8217835 (jdk13), so the original patch does not fix test/jdk/sun/security/pkcs11/fips/. I added the database files to test/jdk/sun/security/pkcs11/fips so that pkcs11/fips/ClientJSSEServerJSSE.java and pkcs11/fips/TrustManagerTest.java can run tests using sqlite and pass.
>> 
>> Testing: jdk/sun/security/pkcs11 tests on RHEL9, GHA testing
>> 
>> Thanks.
>
> Taizo Kurashige has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:
> 
>  - Merge branch 'openjdk:master' into backport-8296631
>  - Backport 6e1aacdfba5a32f7b071eea8039888d275827e83
>  - Backport 6e1aacdfba5a32f7b071eea8039888d275827e83

Why are the two sets of files key4.db and cert9.db different?


zarquon:Downloads $ shasum cert9*.db
41eed34f2505f3a549cb85542ae58b2f239c593e  cert9(1).db
b0e2a3aa1c884de00a342e01d5c2aa4c4ca1d801  cert9.db
zarquon:Downloads $ shasum key4*.db
c06ef63d0a2e960bbe91744c2fe1b8e7cd2bd841  key4(1).db
0a48f27990384fbae2d70dc9a496d08b6b5ea0f3  key4.db


dbtool can't read the files in fips/. Are they a different kind of database?

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/2955#issuecomment-2459029633