From c0fed9395809abfb3bbe1e0473d73158ba2c5aba Mon Sep 17 00:00:00 2001 From: JinhangZhang Date: Wed, 27 Mar 2024 13:15:22 -0400 Subject: [PATCH] Remove the 192-bit EC test case This patch eliminates the 192-bit EC test which causes exceptions seen in issue #18320. DefaultSignatureAlgorithm test was run in those Redhat OS based machines in a non-FIPS mode, but with a FIPS version of openssl. So, a 192-bit size of EC key pair generator is not allowed by the native code in a FIPS version of openssl. The code path went to a replacement EC key-pair generator Java implementation. issue: https://github.com/eclipse-openj9/openj9/issues/18320 --- .../tools/keytool/fakegen/DefaultSignatureAlgorithm.java | 1 - 1 file changed, 1 deletion(-) diff --git a/test/jdk/sun/security/tools/keytool/fakegen/DefaultSignatureAlgorithm.java b/test/jdk/sun/security/tools/keytool/fakegen/DefaultSignatureAlgorithm.java index 6f2d918093b..b47eaf2cb37 100644 --- a/test/jdk/sun/security/tools/keytool/fakegen/DefaultSignatureAlgorithm.java +++ b/test/jdk/sun/security/tools/keytool/fakegen/DefaultSignatureAlgorithm.java @@ -60,7 +60,6 @@ public static void main(String[] args) throws Exception { check("DSA", 1024, null, "SHA256withDSA"); check("DSA", 3072, null, "SHA256withDSA"); - check("EC", 192, null, "SHA256withECDSA"); check("EC", 384, null, "SHA384withECDSA"); check("EC", 571, null, "SHA512withECDSA");