[jboss-jira] [JBoss JIRA] (ELY-1680) IBM, failing KeyStoreSuiteChild.testGetCertificateChainBinary

[Jiri Ondrusek (Jira)]

    [ https://issues.jboss.org/browse/ELY-1680?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13647831#comment-13647831 ] 

Jiri Ondrusek commented on ELY-1680:
------------------------------------

[~fjuma] I've looked into my backup from fixing ELY-1616 and here are some commands :
keytool -exportcert -keystore server.keystore.jks  -storepass secret -alias localhost -file ca.crt
keytool -exportcert -keystore server.truststore.jks  -storepass secret -alias client -file client.crt
openssl x509 -in ca.crt -inform der -outform pem -out ca.pem
openssl x509 -in client.crt -inform der -outform pem -out client.pem
./ldap-keystore-gen.sh client.pem ca.pem server.keystore.jks > example.ldif

(ldap-keystore-gen.sh is attached)

I suppose that test ldiffs were generate with similar commands, probably with different name then in my example.

[~fjuma] I can look into this issue - may be it will help. If you agree, please let me know.

> IBM, failing KeyStoreSuiteChild.testGetCertificateChainBinary
> -------------------------------------------------------------
>
>                 Key: ELY-1680
>                 URL: https://issues.jboss.org/browse/ELY-1680
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Testsuite
>    Affects Versions: 1.6.1.Final
>            Reporter: Martin Choma
>            Priority: Major
>             Fix For: 1.7.0.CR3
>
>         Attachments: ldap-keystore-gen.sh
>
>
> {code}
> [ERROR] testGetCertificateChainBinary(org.wildfly.security.ldap.KeyStoreSuiteChild)  Time elapsed: 0.057 s  <<< FAILURE!
> org.junit.ComparisonFailure: expected:<CN=[firefly_binary], OU=Elytron, O=Elyt...> but was:<CN=[localhost], OU=Elytron, O=Elyt...>
> 	at org.wildfly.security.ldap.KeyStoreSuiteChild.testGetCertificateChainBinary(KeyStoreSuiteChild.java:136)
> 	at org.wildfly.security.ldap.DirContextFactoryRule$1.evaluate(DirContextFactoryRule.java:218)
> {code}
> If I switch order of certificates in chain, then test passes.
> {code}
> diff --git a/src/test/java/org/wildfly/security/ldap/KeyStoreSuiteChild.java b/src/test/java/org/wildfly/security/ldap/KeyStoreSuiteChild.java
> index d8095867a..cda635beb 100644
> --- a/src/test/java/org/wildfly/security/ldap/KeyStoreSuiteChild.java
> +++ b/src/test/java/org/wildfly/security/ldap/KeyStoreSuiteChild.java
> @@ -133,8 +133,8 @@ public class KeyStoreSuiteChild {
>          Certificate[] chain = keyStore.getCertificateChain("firefly_binary");
>          Assert.assertNotNull(chain);
>          Assert.assertEquals(2, chain.length);
> -        Assert.assertEquals("CN=firefly_binary, OU=Elytron, O=Elytron, L=Elytron, ST=Elytron, C=UK", ((X509Certificate)chain[0]).getSubjectDN().toString());
> -        Assert.assertEquals("CN=localhost, OU=Elytron, O=Elytron, L=Elytron, ST=Elytron, C=UK", ((X509Certificate)chain[1]).getSubjectDN().toString());
> +        Assert.assertEquals("CN=firefly_binary, OU=Elytron, O=Elytron, L=Elytron, ST=Elytron, C=UK", ((X509Certificate)chain[1]).getSubjectDN().toString());
> +        Assert.assertEquals("CN=localhost, OU=Elytron, O=Elytron, L=Elytron, ST=Elytron, C=UK", ((X509Certificate)chain[0]).getSubjectDN().toString());
>      }
> {code}
> -For some reason I want able to debug code with -Dmaven.surefire.debug (Breakpoint was never hit) to find out which calls switch the order.-
> It takes long (5min) for debugger to attach to code.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)