RFR[13]: 8222133: Add temporary exceptions for root certs that are due to expire soon
Sean Mullan
sean.mullan at oracle.com
Mon Apr 8 17:02:43 UTC 2019
Please review this fix to add temporary test exceptions for 4 more root
CA certificates that are due to expire soon and will start causing test
failures in the next couple of days.
bug: https://bugs.openjdk.java.net/browse/JDK-8222133
diffs:
$ hg diff
diff -r 0608ef3a7740 test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
--- a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java Mon Apr
08 18:42:29 2019 +0200
+++ b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java Mon Apr
08 13:01:36 2019 -0400
@@ -25,7 +25,7 @@
/**
* @test
* @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923
8195774 8199779
- * 8209452 8209506 8210432 8195793 8222089
+ * 8209452 8209506 8210432 8195793 8222089 8222133
* @summary Check root CA entries in cacerts file
*/
import java.io.File;
@@ -239,8 +239,18 @@
// No error will be reported if certificate in this list expires
private static final HashSet<String> EXPIRY_EXC_ENTRIES = new
HashSet<>() {
{
+ // Valid until: Sat Jul 06 19:59:59 EDT 2019
add("certplusclass2primaryca [jdk]");
+ // Valid until: Sat Jul 06 19:59:59 EDT 2019
add("certplusclass3pprimaryca [jdk]");
+ // Valid until: Tue Jul 09 14:40:36 EDT 2019
+ add("utnuserfirstobjectca [jdk]");
+ // Valid until: Tue Jul 09 19:59:00 EDT 2019
+ add("deutschetelekomrootca2 [jdk]");
+ // Valid until: Tue Jul 09 13:36:58 EDT 2019
+ add("utnuserfirstclientauthemailca [jdk]");
+ // Valid until: Tue Jul 09 14:19:22 EDT 2019
+ add("utnuserfirsthardwareca [jdk]");
}
};
--Sean
More information about the security-dev
mailing list