[security-dev 01700]: Re: Please review new regression test for java.net.* API

Sean Mullan Sean.Mullan at Sun.COM
Thu Mar 18 07:59:56 PDT 2010


Alan Bateman wrote:
> Christopher Hegarty -Sun Microsystems Ireland wrote:
>> :
>>
>> Alan is correct there are already tests for SSL/Https in javax.net, 
>> but I believe these use self signed certs, no dependency on cacerts.
> OK, in that case adding a new test make sense. The test/java/net tree is 
> probably not the best place though - maybe test/javax/net/ssl?  I'm sure 
> there will be suggestions on security-dev on the best way to 
> exercise/test it.

The dependency on cacerts is definitely an issue. The cacerts file is empty in 
JDK 7.

--Sean



More information about the security-dev mailing list