[jira] [Commented] (CXF-9006) TrustedAuthorityValidatorCRLTest#testIsCertChainValid fails when using Red Hat OpenJDK on PPC64LE

["Freeman Yue Fang (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CXF-9006?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17842022#comment-17842022 ] 

Freeman Yue Fang commented on CXF-9006:
---------------------------------------

Hi [~jgoodyear],

Could you please copy the cer files I attached here to
services/xkms/xkms-x509-handlers/src/test/resources/trustedAuthorityValidator/
folder to override the old ones and rerun the test against the JDKs you are testing?

These new cer files are RSA2048 instead the previous DSA1024.

Thanks
Freeman

> TrustedAuthorityValidatorCRLTest#testIsCertChainValid fails when using Red Hat OpenJDK on PPC64LE
> -------------------------------------------------------------------------------------------------
>
>                 Key: CXF-9006
>                 URL: https://issues.apache.org/jira/browse/CXF-9006
>             Project: CXF
>          Issue Type: Test
>    Affects Versions: 4.0.4, 4.1.0
>         Environment: Java version: 17.0.6, vendor: Red Hat, Inc., runtime: /usr/lib/jvm/java-17-openjdk-17.0.6.0.10-3.el9.ppc64le
> OS name: "linux", version: "5.14.0-378.el9.ppc64le", arch: "ppc64le", family: "unix"
>            Reporter: Jamie Mark Goodyear
>            Priority: Minor
>         Attachments: wss40.cer, wss40CA.cer, wss40CACRL.cer, wss40rev.cer
>
>
> {{TrustedAuthorityValidatorCRLTest#testIsCertChainValid}} failing when using Red Hat OpenJDK 17. The error revealed when using {{-Djava.security.debug=certpath}} is that the JVM can not find a valid certification path to the requested target -- note: this unit test works on Bellsoft, Temurin, IBM, Corretto, Zulu, on other platforms, and is confirmed to work with Semeru/Temurin Java on PPC64LE.
> Given this is restricted to one particular JVM distribution/platform, would this be a candidate for a skip test?
> {{sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) at org.apache.cxf.xkms.x509.validator.TrustedAuthorityValidator.isCertificateChainValid(TrustedAuthorityValidator.java:84)}}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)