Details

    • Sub-task
    • Status: Verified (View Workflow)
    • Blocker
    • Resolution: Done
    • None
    • 7.2.0.CD14
    • Test Suite
    • None

    Description

      ws testsuite failures on JDK-11:

      • missing local IP in SubjectAlternativeNamesExtension
      • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + TLS1.2 seems buggy on JDK-11: Invalid ECDH ServerKeyExchange signature
      • not issue after switching to TLS1.1 or to ciphersuite TLS_RSA_WITH_AES_256_CBC_SHA256 -> JDK bug
      [ERROR] Tests run: 10, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 36.452 s <<< FAILURE! - in org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase
      [ERROR] testHolderOfKey(org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase)  Time elapsed: 0.674 s  <<< ERROR!
      javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
      ...
      Caused by: java.security.cert.CertificateException: No subject alternative names present
      
      [ERROR] testBearer(org.jboss.as.test.integration.ws.wsse.trust.WSTrustTestCase)  Time elapsed: 0.229 s  <<< ERROR!
      javax.xml.ws.WebServiceException: org.apache.cxf.service.factory.ServiceConstructionException: Failed to create service.
      ...
      Caused by: java.security.cert.CertificateException: No name matching localhost found
      

      Attachments

        Issue Links

          Activity

            People

              jkalina@redhat.com Jan Kalina (Inactive)
              jkalina@redhat.com Jan Kalina (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: