Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6365829

PKCS11/DSA signatures on Niagara are always succeeding when they should be failing.

XMLWordPrintable

      Hotspot is reporting new failures in JCE.

      The attached code is failing on sol10/niagra machines, but passing on sol10/non-niagra
      machines. Essentially, the code is calling for some DSA signature verifications
      via X509Certificates, and in cases where the public keys are incorrect, the
      verify() calls are still passing.

          getCertificate(certString).verify(unknownPublicKey);

      should fail, but it's passing.

      Since JCE initializes by verifying the Signature implementation by making a bunch
      of sig calls, JCE on niagara is essentially dead, thus the higher priority.

      See the workaround if this is impacting you. It might be worth integrating this
      temporary fix into j2se to fallback to SunJCE until this is actually fixed.

      The call to:

          token.p11.C_Verify(session.id(), digest, signature)

      is failing correctly on shimmer.sfbay (ss/non-niagara), but passing incorrectly on vm-t2000-01.sfbay (niagara).
      This bug is affecting the following JTREG test:

          sun/management/jmxremote/bootstrap/RmiRegistrySslTest.sh

            andreas Andreas Sterbenz
            wetmore Bradford Wetmore
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: