[11] RFR: 8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure

[Sibabrata Sahoo]

Hi Daniel,

 

I am not a member of HYPERLINK "mailto:jmx-dev at openjdk.java.net"jmx-dev at openjdk.java.net. So the review posted is waiting for moderator's approval.

 

Thanks,

Siba

 

From: Sibabrata Sahoo 
Sent: Thursday, June 28, 2018 8:40 PM
To: jmx-dev at openjdk.java.net; security-dev at openjdk.java.net
Subject: [11] RFR: 8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure

 

Hi,

 

Please review the patch for,

 

JBS: https://bugs.openjdk.java.net/browse/JDK-8205653

Webrev: http://cr.openjdk.java.net/~ssahoo/8205653/webrev.00/

 

Change:

The Test has been upgraded to address the following 2 cases,

Add protocol support for TLSv1.3. The change is done in the config file named "management_ssltest11_ok.properties.in".
Add support for legacy TLS. Now a new config file "management_ssltest15_ok.properties.in" hold TLS protocol "TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA" instead of "SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_RC4_128_MD5".

 

Previously the Test was using DSA keys which is not compatible with TLSv1.3. So the keys has been upgraded to use RSA(2048 bit). Hence the instruction in "Readme.txt" changed which generates RSA(2048 bit) keys.

 

NOTE: Few Test was problem listed which are removed from the list now. Mach 5 result PASS with multiple try for all 14 Test belongs to "open/test/jdk/sun/management/jmxremote" folder.

 

Thanks,

Siba
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20180628/f23cfbc5/attachment.htm>