[RFR]: 8220575: Replace hardcoded 127.0.0.1 in URLs with new URI builder
Arthur Eubanks
aeubanks at google.com
Wed Mar 27 17:58:10 UTC 2019
>
> 1) The following test fails with this change, when run on an IPv6-only
> environment. The reason is that it contains a certificate that has
> the IPv4 loopback address, 127.0.0.1.
>
>
> sun/net/www/protocol/https/HttpsURLConnection/IPAddressIPIdentities.java
>
> Caused by: java.security.cert.CertificateException: No subject
> alternative names matching IP address 0:0:0:0:0:0:0:1 found
> at
>
> java.base/sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:164)
> at
> java.base/sun.security.util.HostnameChecker.match(HostnameChecker.java:100)
> at
>
> java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:447)
> at
>
> java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:422)
> at
>
> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:233)
> at
>
> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)
> at
>
> java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1315)
> ... 26 more
>
> Maybe we re-create the certificate with a SAN of ::1 in a follow-on
> issue.
>
Yes, I was planning on addressing this in a future change.
>
> ---
>
> 2) It is worth nothing that the following tests do not strictly need to
> be updated, as they either; do not make network connections, or test
> part of the implementation prior to the network connection:
>
> java/net/HttpCookie/ExpiredCookieTest.java
> java/net/ProxySelector/NullSelector.java
> java/net/HttpURLConnection/NoProxyTest.java
> java/net/URLPermission/OpenURL.java
>
> That said, it is good to clean these up and remove the hardcoded
> IPv4 address.
> ---
>
> 3) The following tests pass on an ipv6-only environment, even without
> the changes. The tests catch and swallow the IOException "Network is
> unreachable", when they should not.
>
> com/sun/net/httpserver/bugs/B6401598.java
> com/sun/net/httpserver/bugs/B6373555.java
>
> I can file a separate issue for these, since it is unrelated.
Sounds good.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.java.net/pipermail/net-dev/attachments/20190327/1f899ada/attachment.html>
More information about the net-dev
mailing list