[security-dev 01700]: Re: Please review new regression test for java.net.* API
Sean Mullan
Sean.Mullan at Sun.COM
Thu Mar 18 14:59:56 UTC 2010
Alan Bateman wrote:
> Christopher Hegarty -Sun Microsystems Ireland wrote:
>> :
>>
>> Alan is correct there are already tests for SSL/Https in javax.net,
>> but I believe these use self signed certs, no dependency on cacerts.
> OK, in that case adding a new test make sense. The test/java/net tree is
> probably not the best place though - maybe test/javax/net/ssl? I'm sure
> there will be suggestions on security-dev on the best way to
> exercise/test it.
The dependency on cacerts is definitely an issue. The cacerts file is empty in
JDK 7.
--Sean
More information about the security-dev
mailing list