Test report for Trustmanager patch #3869

Setup

This test was done on the CERN certification testbed. The machine used was a 64 bit SL5 machine. First the latest certified versions of glite-security-trustmanager, and glite-security-util-java (2.5.5-1 for both). The CREAM-CE repo was used to get other necessary dependencies. The config_secure_tomcat and config_crl yaim functions were run. After this the test were run according to the test documentation (org.glite.testsuites.ctb/trustmanager). The test report against the run on the original versions is attached. Bugs were also confirmed on this setup.

After this util-java was updated to the patch version glite-security-util-java-2.7.1-1, and the certification tests were run, and bugfixes verified.

Bugs

bug #21250: Trustmanager logs roll too fast and old entries are lost

This fix was already available in the newest certified version. log4j.appender.fileout.MaxFileSize=2000KB

bug #61443: [org.glite.security.util-java] TrustManager creates too many objects

It was not feasible to test this bug in the scope of the certification, not verified

bug #64516: Util-java (trustmanager) not handling correctly namespaces of hierarchical CAs

Verified. This case was tested with test CA's and namespaces made for this in glite.security.test-utils. The SSL handshake failed where it should have succeeded.

The bug fix was verified with the same tests after updating util-java. Test cases for this bug, and other namespace intricacies was added to the certification test.

bug #63732: Util-java DN classes produce DN in wrong order

It was not feasible to test this bug in the scope of the certification, not verified

Certification test

The certification tests were slightly modified to add more namespace tests. They were also cleaned up a bit. All certification tests passed without problems. Output attached

Node type tests

glite-CREAM

Installed and configured a cream ce with the newest certified version of util-java and trustmanager (2.5.5-1). Confirmed that the setup worked. Logs are attached. The CREAM CE did not have a batch scheduler interface, so job execution did not happen. Logs show that the user authentication part works thought. Upgraded util-java to the new version (2.7.1-1) and restarted tomcat. Confirmed that it still worked. Output attached.