Bug 1971120 - SunPKCS11 provider is missing from java.security
Summary: SunPKCS11 provider is missing from java.security
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: java-latest-openjdk
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Petra Alice Mikova
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-06-12 09:18 UTC by Francisco de la Peña
Modified: 2021-07-09 01:06 UTC (History)
4 users (show)

Fixed In Version: java-latest-openjdk-17.0.0.0.26-0.3.ea.rolling.fc35 java-latest-openjdk-16.0.1.0.9-4.rolling.fc34 java-latest-openjdk-16.0.1.0.9-4.rolling.fc33 java-latest-openjdk-16.0.1.0.9-3.rolling.el7 java-latest-openjdk-16.0.1.0.9-3.rolling.el8
Clone Of:
Environment:
Last Closed: 2021-06-28 20:25:42 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Francisco de la Peña 2021-06-12 09:18:54 UTC
Description of problem:

Changes introduced when updating to OpenJDK 15 modified the rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch file to update it after a solaris conditional removal also removed the provider, likely an oversight due to the confusing commented out line existing before in the patch.

The commit introducing the issue: https://src.fedoraproject.org/rpms/java-latest-openjdk/c/a64f9d7aa2881a5ed3b8e49baf44a6d1a839d6db

Original line before:

https://github.com/openjdk/jdk/blob/f04a7e5cb465bb630201650245356b60228b8dd7/src/java.base/share/conf/security/java.security#L86-L88

Original line after:

https://github.com/openjdk/jdk/blob/071bd521bca2485c6df95c45e4310d39b05bd046/src/java.base/share/conf/security/java.security#L80

The java-11-openjdk patch does not remove the line:

https://src.fedoraproject.org/rpms/java-11-openjdk/blob/main/f/rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch

Current java-latest-openjdk patch removing the line:

https://src.fedoraproject.org/rpms/java-latest-openjdk/blob/main/f/rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch



Version-Release number of selected component (if applicable):


How reproducible:

Always


Steps to Reproduce:

Java test:

Provider[] providers = Security.getProviders();
for (Provider provider : providers) {
	System.out.println("Provider: {}", provider.getName());
}


Actual results:

SunPKCS11 is missing.


Expected results:

SunPKCS11 gets listed.


Additional info:

This bug affects F33, F34 and rawhide.

Comment 1 jiri vanek 2021-06-14 15:23:55 UTC
hi! Thank you for a great bug report. Will be elaborated.

Comment 2 jiri vanek 2021-06-18 15:02:54 UTC
Please see: https://src.fedoraproject.org/rpms/java-latest-openjdk/pull-request/58 if you have something to say, say now:)

Comment 3 Francisco de la Peña 2021-06-21 19:40:04 UTC
Thanks, the scratch build works for me. Because this is easy to work around by editing the java.config file locally, there is no rush if you plan to rebase into 17ea before pushing a new release.

Comment 4 Fedora Update System 2021-06-24 14:10:37 UTC
FEDORA-2021-8aa38c60d8 has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-8aa38c60d8

Comment 5 Fedora Update System 2021-06-24 14:10:38 UTC
FEDORA-EPEL-2021-ae546e763a has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ae546e763a

Comment 6 Fedora Update System 2021-06-24 16:55:47 UTC
FEDORA-2021-4dc39ca4e3 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-4dc39ca4e3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-4dc39ca4e3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2021-06-24 17:03:36 UTC
FEDORA-EPEL-2021-ae546e763a has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-ae546e763a

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2021-06-24 17:04:51 UTC
FEDORA-EPEL-2021-9b6a3a5183 has been pushed to the Fedora EPEL 7 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9b6a3a5183

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2021-06-24 17:38:33 UTC
FEDORA-2021-8aa38c60d8 has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-8aa38c60d8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-8aa38c60d8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Petra Alice Mikova 2021-06-24 21:22:45 UTC
Hi, the delayed push of this fix to the rawhide is intentional due to the current freeze. I will push it there as soon as I can.

Thank you!

Comment 11 Fedora Update System 2021-06-28 20:19:20 UTC
FEDORA-2021-226e7ee308 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-226e7ee308

Comment 12 Fedora Update System 2021-06-28 20:25:42 UTC
FEDORA-2021-226e7ee308 has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 13 Fedora Update System 2021-07-02 01:08:46 UTC
FEDORA-2021-4dc39ca4e3 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 14 Fedora Update System 2021-07-02 01:20:43 UTC
FEDORA-2021-8aa38c60d8 has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 15 Fedora Update System 2021-07-09 00:42:19 UTC
FEDORA-EPEL-2021-9b6a3a5183 has been pushed to the Fedora EPEL 7 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 16 Fedora Update System 2021-07-09 01:06:03 UTC
FEDORA-EPEL-2021-ae546e763a has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.