Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-9006

TrustedAuthorityValidatorCRLTest#testIsCertChainValid fails when using Red Hat OpenJDK on PPC64LE

    XMLWordPrintableJSON

Details

    • Test
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • 4.0.4, 4.1.0
    • 4.1.0, 4.0.5
    • None
    • None
    • Java version: 17.0.6, vendor: Red Hat, Inc., runtime: /usr/lib/jvm/java-17-openjdk-17.0.6.0.10-3.el9.ppc64le

      OS name: "linux", version: "5.14.0-378.el9.ppc64le", arch: "ppc64le", family: "unix"

    • Unknown

    Description

      TrustedAuthorityValidatorCRLTest#testIsCertChainValid failing when using Red Hat OpenJDK 17. The error revealed when using -Djava.security.debug=certpath is that the JVM can not find a valid certification path to the requested target – note: this unit test works on Bellsoft, Temurin, IBM, Corretto, Zulu, on other platforms, and is confirmed to work with Semeru/Temurin Java on PPC64LE.

      Given this is restricted to one particular JVM distribution/platform, would this be a candidate for a skip test?

      sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) at org.apache.cxf.xkms.x509.validator.TrustedAuthorityValidator.isCertificateChainValid(TrustedAuthorityValidator.java:84)

      Attachments

        1. wss40.cer
          1 kB
          Freeman Yue Fang
        2. wss40CA.cer
          1 kB
          Freeman Yue Fang
        3. wss40CACRL.cer
          0.7 kB
          Freeman Yue Fang
        4. wss40rev.cer
          1 kB
          Freeman Yue Fang

        Activity

          People

            Unassigned Unassigned
            jgoodyear Jamie Mark Goodyear
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: