[jboss-jira] [JBoss JIRA] (WFLY-10812) Some security tests fail on closed channel exception

Jan Kalina (JIRA) issues at jboss.org
Tue Aug 14 04:30:02 EDT 2018


    [ https://issues.jboss.org/browse/WFLY-10812?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13618511#comment-13618511 ] 

Jan Kalina edited comment on WFLY-10812 at 8/14/18 4:29 AM:
------------------------------------------------------------

WSTrustTestCase:
* in GenerateWSKeyStores need to use CN=localhost and add alternative name 127.0.0.1 
* still investigating "SSLHandshakeException: Invalid ECDH ServerKeyExchange signature": it looks {{testPicketLink}} breaks {{testHolderOfKey}} - probably incorrect clean up
{code}
JAVA_HOME=/opt/jdk-11/ PATH=$JAVA_HOME/bin/:$PATH mvn test -Dsurefire.runOrder=alphabetical -Dtest=WSTrustTestCase#testPicketLink+testHolderOfKey
{code}


was (Author: honza889):
WSTrustTestCase:
* in GenerateWSKeyStores need to use CN=localhost and add alternative name 127.0.0.1 
* still investigating "SSLHandshakeException: Invalid ECDH ServerKeyExchange signature"

> Some security tests fail on closed channel exception
> ----------------------------------------------------
>
>                 Key: WFLY-10812
>                 URL: https://issues.jboss.org/browse/WFLY-10812
>             Project: WildFly
>          Issue Type: Bug
>          Components: Test Suite
>            Reporter: Richard Opalka
>            Assignee: Jan Kalina
>            Priority: Blocker
>             Fix For: 14.0.0.CR1
>
>
> With latest JDK11 (build 11-ea+25) the following tests fail due to closed channel exception:	modified:
>  * testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/security/loginmodules/LdapExtLikeAdvancedLdapLMTestCase.java
>  * testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/security/loginmodules/LdapExtLoginModuleTestCase.java
>  * testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/security/loginmodules/LdapLoginModuleTestCase.java
>  * testsuite/integration/elytron/src/test/java/org/wildfly/test/integration/elytron/ssl/UndertowTwoWaySslNeedClientAuthTestCase.java
>  * testsuite/integration/iiop/src/test/java/org/jboss/as/test/iiopssl/basic/IIOPSslInvocationTestCase.java
>  * testsuite/integration/manualmode/src/test/java/org/jboss/as/test/manualmode/security/OutboundLdapConnectionClientCertTestCase.java
>  * testsuite/integration/manualmode/src/test/java/org/jboss/as/test/manualmode/security/OutboundLdapConnectionTestCase.java
>  * testsuite/integration/manualmode/src/test/java/org/jboss/as/test/manualmode/web/ssl/CertificateRolesLoginModuleTestCase.java
>  * testsuite/integration/manualmode/src/test/java/org/jboss/as/test/manualmode/web/ssl/DatabaseCertLoginModuleTestCase.java
>  * testsuite/integration/manualmode/src/test/java/org/jboss/as/test/manualmode/web/ssl/HTTPSWebConnectorTestCase.java
>  * testsuite/integration/ws/src/test/java/org/jboss/as/test/integration/ws/wsse/trust/WSTrustTestCase.java
> Is there a known SSL issue in JDK11? Could somebody from our security team investigate this issue?
> When these tests will start passing WF test suite will be passing 100% of tests on JDK11.
> Potential investigator from our security team may want to include this PR:
> https://github.com/wildfly/wildfly/pull/11499
> to fix known JDK11 issues.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list