[jdk21u-dev] RFR: 8341927: Replace hardcoded security providers with new test.provider.name system property

Goetz Lindenmaier goetz at openjdk.org
Fri Nov 8 16:12:41 UTC 2024


On Thu, 7 Nov 2024 13:07:52 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 21.0.6-oracle.
> 
> I resolved two files:
> test/jdk/sun/security/mscapi/InteropWithSunRsaSign.java
> Copyright
> 
> test/jdk/sun/security/pkcs11/Signature/SigInteropPSS2.java
> Resolved because 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode not in 21.
> 
> Tests all pass except for three I skipped:
> test/jdk/sun/security/pkcs11/rsa/GenKeyStore.java
> test/jdk/sun/security/rsa/GenKeyStore.java
> test/jdk/javax/crypto/SecretKeyFactory/evilprov/com/evilprovider/EvilHmacSHA1.java
> Checked the change in these files.

Nice finding! I think it should be fixed in head. I will double check and open an issue in head and bring that to 21 later on.
But the test works anyways, as the default string is used if the propery is empty.

-------------

PR Comment: https://git.openjdk.org/jdk21u-dev/pull/1138#issuecomment-2465127715


More information about the jdk-updates-dev mailing list