RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test

Rajan Halade rhalade at openjdk.org
Wed Mar 8 17:39:51 UTC 2023


On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

> This fix removes the check for 90 days expiry. But the test will continue to fail if the expired certificate is included in `cacerts` but no exception is granted.
> 
> Fix also includes minor code cleanup.

> 

The fix removes the early warning (90 days). Usually this is very early and only fix is to add certificate to expiry exception. Test would still fail when a expired certificate is included but no exception is granted. I have filed tracking bugs for next few years with due date so we don't miss any.

-------------

PR: https://git.openjdk.org/jdk/pull/12910



More information about the security-dev mailing list