RFR[13]: 8222133: Add temporary exceptions for root certs that are due to expire soon

[Xuelei Fan]

Looks fine to me.

Xuelei

On 4/8/2019 10:02 AM, Sean Mullan wrote:
> Please review this fix to add temporary test exceptions for 4 more root 
> CA certificates that are due to expire soon and will start causing test 
> failures in the next couple of days.
> 
> bug: https://bugs.openjdk.java.net/browse/JDK-8222133
> 
> diffs:
> 
> $ hg diff
> diff -r 0608ef3a7740 test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
> --- a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java      Mon Apr 
> 08 18:42:29 2019 +0200
> +++ b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java      Mon Apr 
> 08 13:01:36 2019 -0400
> @@ -25,7 +25,7 @@
>   /**
>    * @test
>    * @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923 
> 8195774 8199779
> - *      8209452 8209506 8210432 8195793 8222089
> + *      8209452 8209506 8210432 8195793 8222089 8222133
>    * @summary Check root CA entries in cacerts file
>    */
>   import java.io.File;
> @@ -239,8 +239,18 @@
>       // No error will be reported if certificate in this list expires
>       private static final HashSet<String> EXPIRY_EXC_ENTRIES = new 
> HashSet<>() {
>           {
> +            // Valid until: Sat Jul 06 19:59:59 EDT 2019
>               add("certplusclass2primaryca [jdk]");
> +            // Valid until: Sat Jul 06 19:59:59 EDT 2019
>               add("certplusclass3pprimaryca [jdk]");
> +            // Valid until: Tue Jul 09 14:40:36 EDT 2019
> +            add("utnuserfirstobjectca [jdk]");
> +            // Valid until: Tue Jul 09 19:59:00 EDT 2019
> +            add("deutschetelekomrootca2 [jdk]");
> +            // Valid until: Tue Jul 09 13:36:58 EDT 2019
> +            add("utnuserfirstclientauthemailca [jdk]");
> +            // Valid until: Tue Jul 09 14:19:22 EDT 2019
> +            add("utnuserfirsthardwareca [jdk]");
>           }
>       };
> 
> --Sean