On 18 March 2010 14:28, Christopher Hegarty -Sun Microsystems Ireland <christopher.hega...@sun.com> wrote: > Alan Bateman wrote: >> >> Pavel Tisnovsky wrote: >>> >>> Hi, >>> >>> please review new regression test for java.net.* API. This test check if >>> the cacerts keytool database is configured properly and SSL is really >>> working. The test should not fail if SSL is working (in other case it simply >>> throws IOException). Webrev si available at >>> http://cr.openjdk.java.net/~ptisnovs/TestHttps/ >>> >>> Thanks in advance >>> Pavel Tisnovsky >> >> I suspect the dependency on verisign.com will be problematic. Isn't SSL >> already covered by the javax.net and https tests? > > I'm not sure what the prime motivation of the test is. Pavel, can you please > elaborate? > > Reading between the lines I guess the test is verifying that the correct > root Certification Authority is installed in cacerts, i.e. the cert from > www.verisign.com can be validated. > > Alan is correct there are already tests for SSL/Https in javax.net, but I > believe these use self signed certs, no dependency on cacerts. >
Sounds like you have things spot on to me, Chris. > -Chris. > >> >> -Alan. > -- Andrew :-) Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) Support Free Java! Contribute to GNU Classpath and the OpenJDK http://www.gnu.org/software/classpath http://openjdk.java.net PGP Key: 94EFD9D8 (http://subkeys.pgp.net) Fingerprint: F8EF F1EA 401E 2E60 15FA 7927 142C 2591 94EF D9D8
