[jdk8u-dev] RFR: 8341946: [8u] sun/security/pkcs11/ec/ tests fail on RHEL9

[Taizo Kurashige]

On Mon, 28 Oct 2024 14:48:18 GMT, Paul Hohensee <phh at openjdk.org> wrote:

>> The following tests fail when they cannot find the NSS version information, because the initial value of nss_ecc_status is ECCState.Extended and tries to use the EC algorithm not supported in ECCState.Basic,
>> 
>> sun/security/pkcs11/ec/TestECDH.java
>> sun/security/pkcs11/ec/TestECDSA.java
>> sun/security/pkcs11/ec/TestECGenSpec.java
>> 
>> To resolve these failures, change the initial value of nss_ecc_status from ECCState.Extended to ECCState.Basic.
>> 
>> Similar fix was made in [JDK-8253637](https://bugs.openjdk.org/browse/JDK-8253637) for jdk16 and later, and [JDK-8328889](https://bugs.openjdk.org/browse/JDK-8328889) for jdk11.
>> 
>> JDK-8253637 and JDK-8313206 were done with versions higher than jdk8. For this reason, it is normal to do a backport, but do not backport to jdk11 or jdk8 because:
>> 
>> JDK-8253637
>> About jdk11
>> ・The ECDHKeyAgreement.java diff contains enhancements that have not been applied to jdk11 and cannot be backported to jdk11.
>> ・Since TestEC.java is now passed in jdk11 and has been removed from the ProblemList, there is no need to modify Problemlist.txt and TestEC.java.
>> ・The fix for PKCS11Test.java has already been made in JDK-8313206.
>> About jdk8
>> ・For the same reason as jdk11, the ECDHKeyAgreement.java diff is not applicable, and the TestEC.java and Problemlist.txt diffs need not be applied.
>> ・All we need is a PKCS11Test.java fix to resolve 3 failures (TestECDH.java, TestECDSA.java and TestECGenSpec.java). It is appropriate to issue a new bug ID this time because the test to be solved is different from JDK-8253637.
>> 
>> JDK-8313206
>> In JDK-8313206, only jdk11 has the fix to the initial value of nss_ecc_status in PKCS11Test.java.
>> Since JDK-8313206 is a different topic than the one I want to solve this time, I think it is inappropriate to backport to solve 3 failures(TestECDH.java, TestECDSA.java and TestECGenSpec.java).
>> 
>> Thanks
>
> Marked as reviewed by phh (Reviewer).

@phohensee 

If you have time, I would like you to confirm my fix request.
Thanks.

-------------

PR Comment: https://git.openjdk.org/jdk8u-dev/pull/594#issuecomment-2470493610