RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

Rajan Halade rhalade at openjdk.org
Tue Mar 7 21:33:35 UTC 2023


On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

> This fix removes the check for 90 days expiry. But the test will continue to fail if the expired certificate is included in `cacerts` but no exception is granted.
> 
> Fix also includes minor code cleanup.

test/jdk/sun/security/lib/cacerts/VerifyCACerts.java line 345:

> 343:                 cert.checkValidity();
> 344:             } catch (CertificateExpiredException cee) {
> 345:                 if (!EXPIRY_EXC_ENTRIES.contains(alias)) {

@seanjmullan 90 days expiry check is removed but test will continue to check expiry exception. This allows extra time to consider removal of root.

-------------

PR: https://git.openjdk.org/jdk/pull/12910



More information about the security-dev mailing list