Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-21814

Fix test failure in WF-Core LdapTestCase that happens with openjdk-1.8.0.292

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • None
    • 7.4.0.GA
    • Security, Test Suite
    • None

    Description

      With openjdk-1.8.0.292, LdapTestCase#testLdapKeyStoreCopyRemoveAlias has started failing with the following exception:
       

      java.security.KeyStoreException: Key protection  algorithm not found: java.security.UnrecoverableKeyException: Encrypt Private Key failed: unrecognized algorithm name: PBEWithSHA1AndDESede
  at java.security.KeyStore.setKeyEntry(KeyStore.java:1140)
  at org.wildfly.security.keystore.LdapKeyStoreSpi.engineSetKeyEntry(LdapKeyStoreSpi.java:318)
  at java.security.KeyStore.setKeyEntry(KeyStore.java:1140)
  at org.wildfly.extension.elytron.LdapTestCase.testLdapKeyStoreCopyRemoveAlias(LdapTestCase.java:370)
Caused by: java.security.UnrecoverableKeyException: Encrypt Private Key failed: unrecognized algorithm name: PBEWithSHA1AndDESede
  ... 4 more
Caused by: java.security.NoSuchAlgorithmException: unrecognized algorithm name: PBEWithSHA1AndDESede
  ... 4 more

       
      This a known JDK 8 issue that will be fixed in version 301:
      https://bugs.openjdk.java.net/browse/JDK-8258401
       
      As mentioned in the above bug report, they will be updating the default encryption algorithm that's used with PKCS12 to a stronger algorithm so PBEWithSHA1AndDESede will no longer be used by default.
       
      For now, we'll need to update the test so that a stronger encryption algorithm gets used.
       

      Attachments

        Issue Links

          clones

          Task - Represents a small unit of work that is not end-user facing. WFCORE-5383 Fix test failure in LdapTestCase that happens with openjdk-1.8.0.292

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              parsharm Parul Sharma
              okotek@redhat.com Ondrej Kotek
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: