RFR: 8282201: Consider removal of expiry check in VerifyCACerts.java test
Rajan Halade
rhalade at openjdk.org
Wed Mar 8 17:39:51 UTC 2023
On Tue, 7 Mar 2023 21:19:37 GMT, Rajan Halade <rhalade at openjdk.org> wrote:
> This fix removes the check for 90 days expiry. But the test will continue to fail if the expired certificate is included in `cacerts` but no exception is granted.
>
> Fix also includes minor code cleanup.
>
The fix removes the early warning (90 days). Usually this is very early and only fix is to add certificate to expiry exception. Test would still fail when a expired certificate is included but no exception is granted. I have filed tracking bugs for next few years with due date so we don't miss any.
-------------
PR: https://git.openjdk.org/jdk/pull/12910
More information about the security-dev
mailing list