RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

Xue-Lei Andrew Fan xuelei at openjdk.org
Wed Mar 8 03:43:12 UTC 2023


The message from this sender included one or more files
which could not be scanned for virus detection; do not
open these files unless you are certain of the sender's intent.

----------------------------------------------------------------------
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

> This fix removes the check for 90 days expiry. But the test will continue to fail if the expired certificate is included in `cacerts` but no exception is granted.
> 
> Fix also includes minor code cleanup.

If the check get removed, how could the expired cert get caught in the future?

-------------

PR: https://git.openjdk.org/jdk/pull/12910



More information about the security-dev mailing list