RFR: 8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3

Fernando Guallini fguallini at openjdk.java.net
Mon Feb 22 16:46:53 UTC 2021


Kerberos new replay cache format released in 1.18 (installed in OL8.3) is causing the tests failures:
`https://web.mit.edu/kerberos/www/krb5-latest/doc/formats/rcache_file_format.html`

New and old format are not compatible, that means they cannot share a rcache file. Since there is no interoperability between java GSS-API and native GSS-API new rcache format at the moment, this patch only enables the test scenarios that mimic AP-REQ replays with multiple processes using native GSS-API only (when available) and multiple processes using Java own implementation API only. 

If there is a decision to support the new format in the future, tests will be revisited accordingly.

-------------

Commit messages:
 - java lib does not share rcache with native lib

Changes: https://git.openjdk.java.net/jdk/pull/2676/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=2676&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8258855
  Stats: 50 lines in 3 files changed: 25 ins; 22 del; 3 mod
  Patch: https://git.openjdk.java.net/jdk/pull/2676.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/2676/head:pull/2676

PR: https://git.openjdk.java.net/jdk/pull/2676


More information about the security-dev mailing list