Bug 1689163 - (6.4.z) Ldaps tests failing on JDK 8u181
Summary: (6.4.z) Ldaps tests failing on JDK 8u181
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: Testsuite
Version: 6.4.21
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: CR1
: EAP 6.4.22
Assignee: jboss-set
QA Contact: Peter Mackay
URL:
Whiteboard:
Depends On:
Blocks: eap6422-payload
TreeView+ depends on / blocked
 
Reported: 2019-03-15 10:33 UTC by Tomas Hofman
Modified: 2019-08-19 12:45 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-08-19 12:45:31 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker JBEAP-15323 0 Major Verified [QE](7.1.z) Ldaps tests failing with latest JDK 2020-03-25 08:41:15 UTC

Description Tomas Hofman 2019-03-15 10:33:23 UTC 
LdapExtLoginModuleTestCase and LdapLoginModuleTestCase are failing with SSLHandshakeException


java.lang.AssertionError: Unexpected status code returned after the authentication. expected:<200> but was:<401>
	at org.junit.Assert.fail(Assert.java:88)
	at org.junit.Assert.failNotEquals(Assert.java:743)
	at org.junit.Assert.assertEquals(Assert.java:118)
	at org.junit.Assert.assertEquals(Assert.java:555)
	at org.jboss.as.test.integration.security.common.Utils.makeCallWithBasicAuthn(Utils.java:524)
	at org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.testDeployment(LdapExtLoginModuleTestCase.java:274)
	at org.jboss.as.test.integration.security.loginmodules.LdapExtLoginModuleTestCase.test2(LdapExtLoginModuleTestCase.java:197)



For LDAPS connections host verification check was added by default. See https://www.oracle.com/technetwork/java/javase/8u181-relnotes-4479407.html#JDK-8200666
Comment 2 Tomas Hofman 2019-03-15 11:11:09 UTC 
@Brad, @Peter need acks. This is just a testsuite fix for JDK 8.
Comment 3 Tomas Hofman 2019-03-18 10:40:29 UTC 
Exception in the test output:

05:04:28,525 WARN  [org.apache.directory.server.ldap.LdapProtocolHandler] (NioProcessor-10) Unexpected exception forcing session to close: sending disconnect notice to client.: javax.net.ssl.SSLHandshakeException: SSL handshake failed.
	at org.apache.mina.filter.ssl.SslFilter.messageReceived(SslFilter.java:487)
	at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:417)
	at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:47)
	at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:765)
	at org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:109)
	at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:417)
	at org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:410)
	at org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:710)
	at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:664)
	at org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:653)
	at org.apache.mina.core.polling.AbstractPollingIoProcessor.access$600(AbstractPollingIoProcessor.java:67)
	at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:1124)
	at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	at java.lang.Thread.run(Thread.java:748)
Caused by: javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
	at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
	at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
	at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)
	at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)
	at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)
	at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
	at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
	at org.apache.mina.filter.ssl.SslHandler.unwrap(SslHandler.java:728)
	at org.apache.mina.filter.ssl.SslHandler.unwrapHandshake(SslHandler.java:666)
	at org.apache.mina.filter.ssl.SslHandler.handshake(SslHandler.java:552)
	at org.apache.mina.filter.ssl.SslHandler.messageReceived(SslHandler.java:351)
	at org.apache.mina.filter.ssl.SslFilter.messageReceived(SslFilter.java:468)
	... 15 more
Comment 6 Peter Mackay 2019-05-08 20:24:34 UTC 
Regression tests passed
Verified with EAP 6.4.22.CP.CR1
Note You need to log in before you can comment on or make changes to this bug.