RFR[13]: 8222133: Add temporary exceptions for root certs that are due to expire soon

Sean Mullan sean.mullan at oracle.com
Mon Apr 8 17:02:43 UTC 2019


Please review this fix to add temporary test exceptions for 4 more root 
CA certificates that are due to expire soon and will start causing test 
failures in the next couple of days.

bug: https://bugs.openjdk.java.net/browse/JDK-8222133

diffs:

$ hg diff
diff -r 0608ef3a7740 test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
--- a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java      Mon Apr 
08 18:42:29 2019 +0200
+++ b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java      Mon Apr 
08 13:01:36 2019 -0400
@@ -25,7 +25,7 @@
  /**
   * @test
   * @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923 
8195774 8199779
- *      8209452 8209506 8210432 8195793 8222089
+ *      8209452 8209506 8210432 8195793 8222089 8222133
   * @summary Check root CA entries in cacerts file
   */
  import java.io.File;
@@ -239,8 +239,18 @@
      // No error will be reported if certificate in this list expires
      private static final HashSet<String> EXPIRY_EXC_ENTRIES = new 
HashSet<>() {
          {
+            // Valid until: Sat Jul 06 19:59:59 EDT 2019
              add("certplusclass2primaryca [jdk]");
+            // Valid until: Sat Jul 06 19:59:59 EDT 2019
              add("certplusclass3pprimaryca [jdk]");
+            // Valid until: Tue Jul 09 14:40:36 EDT 2019
+            add("utnuserfirstobjectca [jdk]");
+            // Valid until: Tue Jul 09 19:59:00 EDT 2019
+            add("deutschetelekomrootca2 [jdk]");
+            // Valid until: Tue Jul 09 13:36:58 EDT 2019
+            add("utnuserfirstclientauthemailca [jdk]");
+            // Valid until: Tue Jul 09 14:19:22 EDT 2019
+            add("utnuserfirsthardwareca [jdk]");
          }
      };

--Sean



More information about the security-dev mailing list