Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-15346 JDK11 Some security tests fail on closed channel exception
  3. JBEAP-15485

JDK11 ws testsuite SSL failures

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Done
    • Blocker
    • 7.2.0.CD14
    • None
    • Test Suite
    • None

    Description

      ws testsuite failures on JDK-11:

      • missing local IP in SubjectAlternativeNamesExtension
      • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + TLS1.2 seems buggy on JDK-11: Invalid ECDH ServerKeyExchange signature
      • not issue after switching to TLS1.1 or to ciphersuite TLS_RSA_WITH_AES_256_CBC_SHA256 -> JDK bug
      [ERROR] Tests run: 10, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 36.452 s <<< FAILURE! - in org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase
[ERROR] testHolderOfKey(org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase)  Time elapsed: 0.674 s  <<< ERROR!
javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
...
Caused by: java.security.cert.CertificateException: No subject alternative names present

      [ERROR] testBearer(org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase)  Time elapsed: 0.229 s  <<< ERROR!
javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
...
Caused by: java.security.cert.CertificateException: No name matching localhost found

      Attachments

        Issue Links

          clones

          Sub-task - The sub-task of the issue WFLY-10945 JDK11 ws testsuite SSL failures

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              jkalina@redhat.com Jan Kalina (Inactive)
              jkalina@redhat.com Jan Kalina (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: