RFR: 8308592: Framework for CA interoperability testing [v10]

Rajan Halade rhalade at openjdk.org
Fri Sep 15 17:32:49 UTC 2023


On Fri, 15 Sep 2023 17:31:15 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

>> The new approach uses test URLs directly to verify interoperability with CA infrastructure. This would help us avoid having regular test fixes to update test artifacts as long as CAs keep test domains up to date.
>
> Rajan Halade has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 19 commits:
> 
>  - Merge branch 'master' into 8308592-certexpiry
>  - Consolidate CA tests#3
>  - Consolidate CA tests#2
>  - Consolidate CA tests
>  - Correct CRL checking
>  - Merge branch 'master' into 8308592-certexpiry
>  - Merge branch 'master' into 8308592-certexpiry
>  - Merge branch 'master' into 8308592-certexpiry
>  - fix typo in TeliaSoneraCA
>  - Enable OCSP logging
>  - ... and 9 more: https://git.openjdk.org/jdk/compare/dc5ca1d3...d941766a

test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CertignaCA.java line 26:

> 24: /*
> 25:  * @test
> 26:  * @bug 8245654 8256895

The tests for `Certigna Root CA` is moved to `CAInterop` but `Certigna` CA test will continue to use old framework as there are no test URLs.

This test is also update test for JDK-8256895 which was part of SSLCA.java test

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/14252#discussion_r1327597264



More information about the security-dev mailing list