RFR: 8349492: Update sun/security/pkcs12/KeytoolOpensslInteropTest.java to use a recent Openssl version [v2]

Weijun Wang weijun at openjdk.org
Fri Feb 14 17:23:15 UTC 2025


On Fri, 14 Feb 2025 16:46:52 GMT, Fernando Guallini <fguallini at openjdk.org> wrote:

>> This updates the OpenSSL version that is used by test `sun/security/pkcs12/KeytoolOpensslInteropTest.java` to the current LTS version (3.0 series). 
>> There are some differences between the 1.1.x and the current OpenSSL version:
>> - RC4 is not longer enabled by default, therefore adding the `-legacy` flag when needed to enable it.  Additionally, It is also required to specify the path location of the legacy provider.
>> - Unlike the old version that throws an error if the MAC was absent from the PKCS12, the 3.0 series shows a warning instead.
>
> Fernando Guallini has updated the pull request incrementally with one additional commit since the last revision:
> 
>   provider path depends on platform

Or "current version". I regret using this in my previous comment. I meant "this one particular version" there.

And yes, it will be clear if you mention the "current version as defined by ...".

-------------

PR Comment: https://git.openjdk.org/jdk/pull/23613#issuecomment-2659876941


More information about the security-dev mailing list