[11] RFR: 8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure

Sibabrata Sahoo sibabrata.sahoo at oracle.com
Thu Jun 28 15:23:20 UTC 2018


Resending the email after subscribing to HYPERLINK "mailto:jmx-dev at openjdk.java.net"jmx-dev at openjdk.java.net

 

Thanks,

Siba

 

From: Sibabrata Sahoo 
Sent: Thursday, June 28, 2018 8:40 PM
To: HYPERLINK "mailto:jmx-dev at openjdk.java.net"jmx-dev at openjdk.java.net; HYPERLINK "mailto:security-dev at openjdk.java.net"security-dev at openjdk.java.net
Subject: [11] RFR: 8205653: test/jdk/sun/management/jmxremote/bootstrap/RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with handshake_failure

 

Hi,

 

Please review the patch for,

 

JBS: https://bugs.openjdk.java.net/browse/JDK-8205653

Webrev: http://cr.openjdk.java.net/~ssahoo/8205653/webrev.00/

 

Change:

The Test has been upgraded to address the following 2 cases,

Add protocol support for TLSv1.3. The change is done in the config file named "management_ssltest11_ok.properties.in".
Add support for legacy TLS. Now a new config file "management_ssltest15_ok.properties.in" hold TLS protocol "TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA" instead of "SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_RC4_128_MD5".

 

Previously the Test was using DSA keys which is not compatible with TLSv1.3. So the keys has been upgraded to use RSA(2048 bit). Hence the instruction in "Readme.txt" changed which generates RSA(2048 bit) keys.

 

NOTE: Few Test was problem listed which are removed from the list now. Mach 5 result PASS with multiple try for all 14 Test belongs to "open/test/jdk/sun/management/jmxremote" folder.

 

Thanks,

Siba
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/security-dev/attachments/20180628/a971cd73/attachment.html>


More information about the security-dev mailing list