RFR: 8231351: Add notes for PKCS11 tests in the test doc

Jie Fu fujie at loongson.cn
Tue Sep 24 08:29:05 UTC 2019


Hi John Jiang,

I don't care which NSS you have skipped.
I am just curious about the root cause for the failure on Ubuntu.

It seems more reasonable to close JDK-8231338 as won't fix.
But you just closed it as can't reproduce.

Thanks.
Best regards,
Jie

On 2019/9/24 下午4:01, sha.jiang at oracle.com wrote:
> Hi Jie,
> IIRC, this test passed on your Ubuntu 18.04 with a new built NSS 3.35 
> libs.
> So, I suspected your Linux or the system built-in NSS libs had 
> something wrong.
> Now that this test passed with NSS 3.35 on others' Linux, including 
> mine, it may not make sense that this test is skipped for NSS 3.35 on 
> all platforms (even Linux only).
> Certainly, you are always welcomed to re-open JDK-8231338.
>
> A bit furthermore...
> Some different PKCS11 test cases have been skipped due to the bugs on 
> different NSS releases or platforms.
> It would be better not to make the codes more complicated to deal with 
> this scenario.
> The alternative NSS libs could be specified (via system property 
> test.nss.lib.paths) for PKCS11 tests.
> It doesn't have to depend on the system built-in NSS libs.
> Different people can use different NSS versions based on their 
> requirements.
>
> Best regards,
> John Jiang
>
> On 2019/9/24 15:03, Jie Fu wrote:
>> I can't understand why JDK-8231338 was closed as "Cannot Reproduce" 
>> since it can always be reproduced on Ubuntu 18.04.2 LTS.
>>
>> Reproduce on Ubuntu 18.04 is very simple:
>> -------------------------------------
>> make test TEST="jtreg:sun/security/pkcs11/Secmod/AddTrustedCert.java" 
>> CONF=re
>> -------------------------------------
>>
>> In the fix of JDK-8180837, the NSS-3.35 was assumed to work with 
>> AddTrustedCert.java, but it failed on Ubuntu 18.04.
>> I wonder whether there is some other reasons which may lead to the 
>> failure.
>> So I filed JDK-8231338 hoping to find the root cause of the failure.
>>
>> But I was disappointed since the author of JDK-8180837 just told me:
>>  "it's hard to say what's the problem, Linux, NSS build or others, on 
>> this test case."
>>
>> In fact, the root cause for the failure on Ubuntu 18.04 still remains 
>> unknown.
>>
>> Thanks a lot.
>> Best regards,
>> Jie
>>
>> On 2019/9/24 下午2:01, Xuelei Fan wrote:
>>> I may be a little bit hesitate to add such words, "highly 
>>> recommended to use the latest NSS version ...", in the general TOP 
>>> doc.  There are a few issues that I wary about:
>>>
>>> It is not always expected that all PKCS 11 test should be run on 
>>> latest NSS version.  Otherwise, there might be compatibility issues 
>>> that we did not handle properly.  The JDK is expected to work with 
>>> as much NSS versions as possible, not just the latest version.  It 
>>> is good to know which version does not really work because of a 
>>> specific bug.
>>>
>>> The note should be added as close as to the place where the issue 
>>> happens, for maintaining and searching.  I think the best place 
>>> could be the test code where the failure occurs 
>>> (test/jdk/sun/security/pkcs11/Secmod/AddTrustedCert.java?).
>>>
>>> However, I'm still not sure if we really want this note.
>>>
>>> JDK-8231338 is reported with NSS 3.35.  Per the comment, the test 
>>> could pass with NSS 3.35 on Debian and Ubuntu, and the bug submitter 
>>> could pass the test with a proper build of NSS 3.35. And then the 
>>> bug was closed as "Cannot Reproduce".  I think we are done with the 
>>> bug.  It might not be necessary to add a note any more.
>>>
>>> Just my $.02.
>>>
>>> Xuelei
>>>
>>> On 9/23/2019 9:06 PM, Jia Huang wrote:
>>>> Hi John Jiang,
>>>>
>>>> Thank you for your review.
>>>>
>>>> 在 2019年09月23日 20:54, sha.jiang at oracle.com 写道:
>>>>> In fact, PKCS11 tests have their own doc at: 
>>>>> test/jdk/sun/security/pkcs11/README 
>>>> I'm afraid most people wouldn't see 
>>>> test/jdk/sun/security/pkcs11/README at all.
>>>> So it makes very little sense to add the notes in it.
>>>> I still prefer doc/testing.md.
>>>>
>>>> A reference to test/jdk/sun/security/pkcs11/README had been added 
>>>> in [1].
>>>>
>>>> Thanks a lot.
>>>> Best regards,
>>>> Jia
>>>>
>>>> [1] http://cr.openjdk.java.net/~jiefu/8231351-huangjia/webrev.01/
>>>>
>>>>
>>>>
>>
>>




More information about the security-dev mailing list