Skip to content

Remove support for sect571k1 as it is no longer supported by Java-17 #1620

@DarshitChanpura

Description

@DarshitChanpura

A known JDK bug JDK-8251547 is causing CI build to fail for Java-17 with the following error:

com.amazon.dlic.auth.http.jwt.HTTPJwtAuthenticatorTest > testES512 FAILED
    java.security.ProviderException: Curve not supported:  sect571k1 [NIST K-571] (1.3.132.0.38)
        at jdk.crypto.ec/sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:157)
        at java.base/java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:727)
        at com.amazon.dlic.auth.http.jwt.HTTPJwtAuthenticatorTest.testES512(HTTPJwtAuthenticatorTest.java:489)

Note: A temporary fix has been implement in #1609 to ignore the broken test.

This issue needs to be triaged to align with one of the two options:

  1. Remove elliptic curve sect571k1 support completely
  2. Add support for this curve when being built using JDK 17

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingv2.0.0

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions