RFR: 8309214: sun/security/pkcs11/KeyStore/CertChainRemoval.java fails after 8301154

[Sergey Bylokhov]

On Wed, 9 Aug 2023 17:07:41 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

>>> > Hi Valerie, we put the PR into our build/test queue to check if it solves some errors we currently notice in CertChainRemoval.java .
>>> 
>>> Sure, thanks! What is the errors that you observed? Are you running against NSS and which version?
>> 
>> Looks like the errors are gone with your patch added.
>> Regarding NSS version, this is what rpm shows, I think this should be the version (on an RHEL 8.5 machine) 
>> 
>> nss-3.67.0-7.el8_5.ppc64le
>
>> > > Hi Valerie, we put the PR into our build/test queue to check if it solves some errors we currently notice in CertChainRemoval.java .
>> > 
>> > 
>> > Sure, thanks! What is the errors that you observed? Are you running against NSS and which version?
>> 
>> Looks like the errors are gone with your patch added. Regarding NSS version, this is what rpm shows, I think this should be the version (on an RHEL 8.5 machine)
>> 
>> nss-3.67.0-7.el8_5.ppc64le
> 
> Thanks for the confirmation! The next step is to find a reviewer for this PR then. ;)

Hi, @valeriepeng 
On my system this test fails because the next exception, do you think it is related to this bug or the new one should be filed?:


Initial PKCS11 KeyStore: 
========
Add pk1, ca1 and root, then delete pk1
test CertChainRemoval.test(): failure
java.security.KeyStoreException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_ATTRIBUTE_READ_ONLY
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11KeyStore.engineSetEntry(P11KeyStore.java:1121)
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11KeyStore.engineSetKeyEntry(P11KeyStore.java:462)
	at java.base/java.security.KeyStore.setKeyEntry(KeyStore.java:1192)
	at CertChainRemoval.main(CertChainRemoval.java:141)
	at PKCS11Test.premain(PKCS11Test.java:178)
	at PKCS11Test.testNSS(PKCS11Test.java:554)
	at PKCS11Test.main(PKCS11Test.java:214)
	at PKCS11Test.main(PKCS11Test.java:190)
	at CertChainRemoval.test(CertChainRemoval.java:77)

-------------

PR Comment: https://git.openjdk.org/jdk/pull/15146#issuecomment-1673659583