Author: peter_firmstone Date: Fri Nov 27 06:31:23 2015 New Revision: 1716801
URL: http://svn.apache.org/viewvc?rev=1716801&view=rev Log: Updated jtreg test policy files to suit Java 8. Added @ignore flag to tests that fail related to Kerberos or missing squid proxy server, so we know that all remaining tests should pass and any other failures are regressions. Removed custard-apple.jar from qa/build.xml and added parameter to skip tests flagged with @ignore. A number of tests that are disabled or uncompleted had their file type renamed or missing @test flag, were named and flagged correctly and the @ignore flag. We probably need to determine what the original authors were trying to achieve and determine if these tests add value. Added: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java - copied, changed from r1715610, river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java.save river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java - copied, changed from r1715610, river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java.save Removed: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java.save river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java.save Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/build.xml river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/config/TestAPI/policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/http/echo/EchoImpl.java river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/RegressionTests/runListenEndpointTest.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestEndpoints.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestPerformance.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpointHttps.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestRMI.java river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnectionHttps.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/runMultihome.sh river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkBoomerangs/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkDefinite/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/registryRetainCodebase/RegistryRetainCodebase.java river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/action/catchSecurityException/security.policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/config/KeyStores/policy river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/unittestlib/UnitTestUtilities.java Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/build.xml URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/build.xml?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/build.xml (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/build.xml Fri Nov 27 06:31:23 2015 @@ -58,7 +58,7 @@ <property name="jtreg.home" location="${env.JT_HOME}" /> <!-- probably should rename the environment variable, to enable using the correct --> <!-- jdk version for the jtreg tests --> - <property name="jdk.home" location="${env.JAVA_HOME}"/> + <property name="jdk.home" location="${env.JDK_HOME}"/> <property name="jtlib.tmp" location="${jtreg.dir}/JTlib-tmp"/> <!-- classpath for use by ClassDep in this build --> @@ -207,7 +207,6 @@ <file name="phoenix-init.jar"/> <file name="tools.jar"/> <file name="classserver.jar"/> - <file name="custard-apple-1.0.3.jar"/> <file name="high-scale-lib.jar"/> </filelist> </move> @@ -221,6 +220,7 @@ <!--<arg value="-Djsk.home=${river.home}"/>--> <arg value="-Djtlib.tmp=${jtlib.tmp}"/> <arg value="-Dscratch.dir=${jtreg.dir}/JTwork/scratch"/> + <arg value="-ignore:quiet"/> <!-- This argument only runs the tests that failed on the last test run --> <!--<arg value="-status:fail"/>--> <!--<arg value="-Djava.security.debug=access,failure"/>--> @@ -253,7 +253,6 @@ <file name="phoenix-init.jar"/> <file name="tools.jar"/> <file name="classserver.jar"/> - <file name="custard-apple-1.0.3.jar"/> <file name="high-scale-lib.jar"/> </filelist> </move> @@ -273,7 +272,6 @@ <file name="phoenix-init.jar"/> <file name="tools.jar"/> <file name="classserver.jar"/> - <file name="custard-apple-1.0.3.jar"/> <file name="high-scale-lib.jar"/> </filelist> </move> @@ -337,7 +335,6 @@ <include name="jsk-platform.jar"/> <include name="jsk-lib.jar"/> <include name="high-scale-lib.jar"/> - <include name="custard-apple-1.0.3.jar"/> </fileset> </classpath> <env key="SOUL" value="${soul}"/> @@ -402,7 +399,7 @@ <target name="run" depends="harness-runtime"> <property name="run.categories" - value="id,loader,policyprovider,locatordiscovery,activation,config,discoverymanager,joinmanager,url,iiop,jrmp,reliability,thread,renewalmanager,constraint,export,lookupdiscovery,servicediscovery,io,security,lookupservice,renewalservice,eventmailbox,jeri,start,discoveryservice,discoveryproviders,javaspace,txnmanager"/> + value="id,loader,policyprovider,locatordiscovery,activation,config,discoverymanager,joinmanager,url,iiop,jrmp,reliability,thread,renewalmanager,constraint,export,lookupdiscovery,servicediscovery,io,security,lookupservice,renewalservice,eventmailbox,jeri,start,discoveryservice,discoveryproviders,javaspace,txnmanager,stress"/> <antcall target="run-categories"/> </target> Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy Fri Nov 27 06:31:23 2015 @@ -20,6 +20,9 @@ grant { permission java.lang.RuntimePermission "createClassLoader"; permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission java.lang.reflect.ReflectPermission "newProxyInPackage."; + permission java.lang.reflect.ReflectPermission "newProxyInPackage.java.util.zip"; // used by TestLibrary to determine test environment permission java.util.PropertyPermission "test.classes", "read"; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/config/TestAPI/policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/config/TestAPI/policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/config/TestAPI/policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/config/TestAPI/policy Fri Nov 27 06:31:23 2015 @@ -27,6 +27,7 @@ grant { permission java.net.SocketPermission "localhost:1024-", "listen,connect,accept"; permission java.net.SocketPermission "*", "connect,resolve"; + permission java.net.SocketPermission "127.0.0.1:1024-", "accept,resolve"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; }; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy Fri Nov 27 06:31:23 2015 @@ -18,6 +18,7 @@ grant { permission java.util.PropertyPermission "test.src", "read"; permission java.util.PropertyPermission "user.dir", "read"; permission java.util.PropertyPermission "java.home", "read"; + permission java.util.PropertyPermission "test.class.path", "read"; // HTTPD needs these permission java.io.FilePermission "..${/}..${/}test.props", "read"; @@ -29,4 +30,6 @@ grant { // permission to connect to class server permission java.net.SocketPermission "*:1024-", "connect"; + + permission java.lang.reflect.ReflectPermission "newProxyInPackage.java.util.zip"; }; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy Fri Nov 27 06:31:23 2015 @@ -13,6 +13,7 @@ grant { permission java.lang.RuntimePermission "createClassLoader"; permission java.lang.RuntimePermission "setContextClassLoader"; permission java.lang.RuntimePermission "getClassLoader"; + permission java.lang.RuntimePermission "accessClassInPackage.com.sun.proxy"; }; grant principal javax.security.auth.x500.X500Principal "CN=bob" { Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/http/echo/EchoImpl.java URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/http/echo/EchoImpl.java?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/http/echo/EchoImpl.java (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/http/echo/EchoImpl.java Fri Nov 27 06:31:23 2015 @@ -16,6 +16,7 @@ * limitations under the License. */ /* @test + * @ignore * @summary Echo implementation for testing basic HTTP endpoint functionality. * @build Echo EchoImpl * @run main/othervm EchoImpl Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/RegressionTests/runListenEndpointTest.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/RegressionTests/runListenEndpointTest.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/RegressionTests/runListenEndpointTest.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/RegressionTests/runListenEndpointTest.sh Fri Nov 27 06:31:23 2015 @@ -16,6 +16,7 @@ # limitations under the License. #*/ # @test +# @ignore # @bug 6181041 # @summary Different ServerEndPoints must allow export on same ListenEndPoint # @build ListenEndpointTest Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestEndpoints.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestEndpoints.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestEndpoints.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestEndpoints.sh Fri Nov 27 06:31:23 2015 @@ -16,6 +16,7 @@ # limitations under the License. #*/ # @test +# @ignore # @summary Test the KerberosEndpoint and KerberosServerEndpoint classes. # @author Daniel Jiang # @library ../../../../../unittestlib Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestPerformance.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestPerformance.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestPerformance.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/kerberos/UnitTests/runTestPerformance.sh Fri Nov 27 06:31:23 2015 @@ -16,6 +16,7 @@ # limitations under the License. #*/ # @test +# @ignore # @summary Tests the end to end performance of Kerberos provider. # @author Daniel Jiang # @library ../../../../../unittestlib Copied: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java (from r1715610, river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java.save) URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java?p2=river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java&p1=river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java.save&r1=1715610&r2=1716801&rev=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java.save (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpoint.java Fri Nov 27 06:31:23 2015 @@ -16,11 +16,12 @@ * limitations under the License. */ -/* test -- Disabled for now. -tjb[28.Apr.2003] +/* @test -- Disabled for now. -tjb[28.Apr.2003] + * @ignore * @summary Tests the SecureConnectionEndpoint methods provided by the Endpoint * class. * @author Tim Blackman - * @library ../../../unittestlib + * @library ../../../../../unittestlib * @build UnitTestUtilities BasicTest Test * @build TestEndpoint TestEndpointUtilities TestUtilities * @run main/othervm/policy=policy/timeout=250 TestConnectionEndpoint Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpointHttps.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpointHttps.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpointHttps.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestConnectionEndpointHttps.sh Fri Nov 27 06:31:23 2015 @@ -15,11 +15,12 @@ # See the License for the specific language governing permissions and # limitations under the License. #*/ -# test -- Disable for now. -tjb[28.Apr.2003] +# @test -- Disable for now. -tjb[28.Apr.2003] +# @ignore # @summary Tests the SecureConnectionEndpoint methods provided by the Endpoint # class over HTTPS. # @author Tim Blackman -# @library ../../../unittestlib +# @library ../../../../../unittestlib # @build UnitTestUtilities BasicTest Test # @build TestEndpoint TestEndpointUtilities TestUtilities # @run main/othervm/policy=policy/timeout=250 -DuseHttps=true Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestRMI.java URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestRMI.java?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestRMI.java (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestRMI.java Fri Nov 27 06:31:23 2015 @@ -638,13 +638,56 @@ public class TestRMI extends TestUtiliti serverPrincipals(x500(serverDSA)), ServerAuthentication.YES), serverRSASubject, - ConnectIOException.class), - new TestNotTrusted("Prefer anonymous, wrong server", - constraints( - serverPrincipals(x500(serverDSA)), - ServerAuthentication.NO), - serverRSASubject, - null) + ConnectIOException.class) + /** + * The following test is commented out because Java 8 doesn't support it. + */ + +//Caused by: net.jini.io.UnsupportedConstraintException: java.security.cert.CertificateException: Remote principal is not trusted +// at net.jini.jeri.ssl.SslConnection.establishCallContext(SslConnection.java:195) +// at net.jini.jeri.ssl.HttpsEndpoint$EndpointInfo.connect(HttpsEndpoint.java:1091) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpsEndpointImpl.getOutboundRequest(HttpsEndpoint.java:724) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpsEndpointImpl$1.next(HttpsEndpoint.java:707) +// at net.jini.jeri.BasicObjectEndpoint$1.next(BasicObjectEndpoint.java:371) +// at net.jini.jeri.BasicInvocationHandler.invokeRemoteMethodOnce(BasicInvocationHandler.java:708) +// ... 16 more +//Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Remote principal is not trusted +// at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) +// at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949) +// at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302) +// at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296) +// at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1509) +// at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216) +// at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979) +// at sun.security.ssl.Handshaker.process_record(Handshaker.java:914) +// at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062) +// at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375) +// at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403) +// at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387) +// at net.jini.jeri.ssl.SslConnection.establishSuites(SslConnection.java:251) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpsConnection.setSSLSocket(HttpsEndpoint.java:951) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpsConnection.createSocket(HttpsEndpoint.java:927) +// at org.apache.river.jeri.internal.http.HttpClientConnection.connect(HttpClientConnection.java:298) +// at org.apache.river.jeri.internal.http.HttpClientConnection.setupConnection(HttpClientConnection.java:268) +// at org.apache.river.jeri.internal.http.HttpClientConnection.<init>(HttpClientConnection.java:96) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpClient.<init>(HttpsEndpoint.java:991) +// at net.jini.jeri.ssl.HttpsEndpoint$HttpsConnection.establishNewSocket(HttpsEndpoint.java:840) +// at net.jini.jeri.ssl.SslConnection.establishCallContext(SslConnection.java:155) +// ... 21 more +//Caused by: java.security.cert.CertificateException: Remote principal is not trusted +// at net.jini.jeri.ssl.FilterX509TrustManager.check(FilterX509TrustManager.java:133) +// at net.jini.jeri.ssl.FilterX509TrustManager.checkServerTrusted(FilterX509TrustManager.java:100) +// at net.jini.jeri.ssl.ClientAuthManager.checkServerTrusted(ClientAuthManager.java:263) +// at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:922) +// at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1491) +// ... 37 more +// , +// new TestNotTrusted("Prefer anonymous, wrong server", +// constraints( +// serverPrincipals(x500(serverDSA)), +// ServerAuthentication.NO), +// serverRSASubject, +// null) }; Subject serverSubject; Copied: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java (from r1715610, river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java.save) URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java?p2=river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java&p1=river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java.save&r1=1715610&r2=1716801&rev=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java.save (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnection.java Fri Nov 27 06:31:23 2015 @@ -16,10 +16,11 @@ * limitations under the License. */ -/* test -- Disabled for now. -tjb[28.Apr.2003] +/* @test -- Disabled for now. -tjb[28.Apr.2003] + * @ignore * @summary Test the ServerConnection class. * @author Tim Blackman - * @library ../../../unittestlib + * @library ../../../../../unittestlib * @build UnitTestUtilities BasicTest Test * @build TestEndpointUtilities TestUtilities * @run main/othervm/policy=policy TestServerConnection Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnectionHttps.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnectionHttps.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnectionHttps.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/TestServerConnectionHttps.sh Fri Nov 27 06:31:23 2015 @@ -15,10 +15,11 @@ # See the License for the specific language governing permissions and # limitations under the License. #*/ -# test -- Disable for now. -tjb[28.Apr.2003] +# @test -- Disable for now. -tjb[28.Apr.2003] +# @ignore # @summary Test the ServerConnection class over HTTPS. # @author Tim Blackman -# @library ../../../unittestlib +# @library ../../../../../unittestlib # @build UnitTestUtilities BasicTest Test # @build TestEndpointUtilities TestUtilities # @run main/othervm/policy=policy -DuseHttps=true TestServerConnection Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/ssl/UnitTests/policy Fri Nov 27 06:31:23 2015 @@ -19,9 +19,9 @@ grant { permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + permission java.lang.reflect.ReflectPermission "newProxyInPackage."; permission java.net.SocketPermission "localhost", "connect,accept,resolve"; - permission java.net.SocketPermission "localhost:1024-", "listen,resolve"; - permission java.net.SocketPermission "*", "resolve"; + permission java.net.SocketPermission "*", "listen,accept,resolve"; // Limit these permissions so that I can do tests for principals for which // I don't have permission. @@ -55,6 +55,7 @@ grant { permission java.security.SecurityPermission "insertProvider.*"; permission java.security.SecurityPermission "putProviderProperty.*"; permission java.security.SecurityPermission "getPolicy"; + permission java.security.SecurityPermission "createAccessControlContext"; permission java.util.PropertyPermission "*", "read,write"; permission javax.security.auth.AuthPermission "modifyPrincipals"; permission javax.security.auth.AuthPermission "modifyPrivateCredentials"; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/runMultihome.sh URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/runMultihome.sh?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/runMultihome.sh (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/runMultihome.sh Fri Nov 27 06:31:23 2015 @@ -16,6 +16,7 @@ # limitations under the License. #*/ # @test +# @ignore # @summary Test the KerberosEndpoint for multihome support # @author Vinod Johnson # @build AbstractSocketFactory Multihomed TestNameService TestNameServiceDescriptor Resolver Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy Fri Nov 27 06:31:23 2015 @@ -14,4 +14,5 @@ grant { permission java.net.SocketPermission "localhost:1024-", "listen"; permission java.net.SocketPermission "*", "connect,accept"; + permission java.security.SecurityPermission "createAccessControlContext"; }; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy Fri Nov 27 06:31:23 2015 @@ -14,6 +14,7 @@ grant { // to move classes into separate codebase directories permission java.util.PropertyPermission "test.classes", "read"; permission java.util.PropertyPermission "user.dir", "read"; + permission java.util.PropertyPermission "test.class.path", "read"; permission java.io.FilePermission "${test.classes}", "read,write"; permission java.io.FilePermission "${test.classes}${/}-", "read,write,delete"; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkBoomerangs/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkBoomerangs/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkBoomerangs/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkBoomerangs/security.policy Fri Nov 27 06:31:23 2015 @@ -46,6 +46,7 @@ grant { permission java.util.PropertyPermission "user.dir", "read"; permission java.util.PropertyPermission "java.home", "read"; permission java.util.PropertyPermission "java.util.logging.config.file", "write"; + permission java.util.PropertyPermission "test.class.path", "read"; // test needs to export rmid and communicate with objects on arbitrary ports permission java.net.SocketPermission "*:1024-", "connect,accept,listen"; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkDefinite/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkDefinite/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkDefinite/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/checkDefinite/security.policy Fri Nov 27 06:31:23 2015 @@ -21,6 +21,7 @@ grant { permission java.util.PropertyPermission "test.src", "read"; permission java.util.PropertyPermission "test.classes", "read"; + permission java.util.PropertyPermission "test.class.path", "read"; permission java.util.PropertyPermission "java.security.policy", "read"; permission java.util.PropertyPermission "java.security.manager", "read"; permission java.util.PropertyPermission "java.home", "read"; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/registryRetainCodebase/RegistryRetainCodebase.java URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/registryRetainCodebase/RegistryRetainCodebase.java?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/registryRetainCodebase/RegistryRetainCodebase.java (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/registryRetainCodebase/RegistryRetainCodebase.java Fri Nov 27 06:31:23 2015 @@ -23,6 +23,7 @@ * passed through the rmiregistry in a series of remote method * invocations. The stub class is preferred. * + * @ignore * Comment Monday, April 1st, 2013: This test fails and has done * for some time, I suspect this occurs because the stub is no longer required, * reflective proxy's are used instead, so we get file: instead of the Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/action/catchSecurityException/security.policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/action/catchSecurityException/security.policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/action/catchSecurityException/security.policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/action/catchSecurityException/security.policy Fri Nov 27 06:31:23 2015 @@ -1,4 +1,6 @@ -grant codeBase "file:${java.home}/lib/ext/*" { +// Changed because an unprivileged domain was present on the +// stack that caused this test to fail. The test creates an AccessControlContext. +grant { permission java.security.AllPermission; }; @@ -9,4 +11,5 @@ grant codeBase "file:${jtlib.tmp}/*" { grant { permission java.util.PropertyPermission "test.*", "read,write"; + permission java.security.SecurityPermission "createAccessControlContext"; }; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/config/KeyStores/policy URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/config/KeyStores/policy?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/config/KeyStores/policy (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/org/apache/river/config/KeyStores/policy Fri Nov 27 06:31:23 2015 @@ -19,5 +19,5 @@ grant { permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; permission java.net.SocketPermission "localhost:1024-", "listen,connect,accept"; - permission java.net.SocketPermission "*", "connect,resolve"; + permission java.net.SocketPermission "*", "connect,accept,resolve"; }; Modified: river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/unittestlib/UnitTestUtilities.java URL: http://svn.apache.org/viewvc/river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/unittestlib/UnitTestUtilities.java?rev=1716801&r1=1716800&r2=1716801&view=diff ============================================================================== --- river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/unittestlib/UnitTestUtilities.java (original) +++ river/jtsk/skunk/qa-refactor-namespace/trunk/qa/jtreg/unittestlib/UnitTestUtilities.java Fri Nov 27 06:31:23 2015 @@ -24,12 +24,14 @@ import java.io.ObjectOutputStream; import java.io.PrintStream; import java.lang.reflect.*; import java.security.AccessControlContext; +import java.security.CodeSource; import java.security.Permission; import java.security.PermissionCollection; import java.security.Permissions; import java.security.Policy; import java.security.ProtectionDomain; import java.security.UnresolvedPermission; +import java.security.cert.Certificate; import java.util.Collection; import java.util.Date; import java.util.Enumeration;
