Please review CR 8048356 Secure Random provider tests
raghu k.nair
raghu.k.nair at oracle.com
Wed Aug 27 10:32:52 UTC 2014
Hi Bernd,
Thanks for looking into it. my comments in-line.
On 8/27/2014 2:57 PM, Bernd Eckenfels wrote:
> Hello,
>
> Since the topic is interesting to me I took a look. Have some nits or
> points to discuss: The testProvider() function seems to be missnamed,
> it actually checks the default Implementation (for the right
> provider). Maybe testDefaultProvider()?
>
Yes you are right . I will rename the testname.
> i would also remove the elses, especially as they print different
> Passed messages. Just one print line after the guards.
Agree on this.
>
> BTW, i think it is very common for java code to request SHA1Prng
> unconditionally (with and without provider=sun) i would add that to
> all OS as a test.
This is already covered by test -
sun/security/provider/SeedGenerator/SeedGeneratorChoice.java
>
> I also wonder if this would be the right place to test the strong
> secure random getter as well?
>
Those tests are already covered Java Compatibility tests . That is the
reason it is omitted from this test.
> what about testing the sorting logic (based on the egd url property) I
> think this is still implemented, even with the different seeding modes
> for Native.
>
This covered by some of the existing tests
sun/security/provider/SecureRandom/StrongSeedReader.java ,
test/closed/sun/security/provider/SecureRandom/SeederRace.java
sun/security/provider/SeedGenerator/SeedGeneratorChoice.java
Thanks,
Raghu
> Gruss
> Bernd
>
> --
> http://bernd.eckenfels.net
> ------------------------------------------------------------------------
> Von: raghu k.nair <mailto:raghu.k.nair at oracle.com>
> Gesendet: 27.08.2014 11:00
> An: Bradford Wetmore <mailto:bradford.wetmore at oracle.com>
> Cc: security-dev at openjdk.java.net <mailto:security-dev at openjdk.java.net>
> Betreff: Please review CR 8048356 Secure Random provider tests
>
> Hi Brad,
> Could you please help in reviewing the following test.
>
> webrev: http://cr.openjdk.java.net/~tyan/raghu/8048356/webrev01/
> <http://cr.openjdk.java.net/%7Etyan/raghu/8048356/webrev01/>
> Bug : JDK-8048356 <https://bugs.openjdk.java.net/browse/JDK-8048356>
>
> Thanks,
> Raghu Nair
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20140827/8a4ef327/attachment.htm>
More information about the security-dev
mailing list