<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello, for a few days we see the test security/infra/java/security/cert/CertPathValidator/certification/GlobalSignR6CA.java<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">failing sometimes. The failures are seen not only in jdk/jdk but also in jdk11, that's why we suppose it might be<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">some issue with the infrastructure and/or certificate authority ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The errors are like this one (shows up on different OS platforms) :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at GlobalSignR6CA.main(GlobalSignR6CA.java:192)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/java.lang.reflect.Method.invoke(Method.java:566)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/java.lang.Thread.run(Thread.java:834)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.security.cert.CertPathValidatorException: OCSP response error: INTERNAL_ERROR<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:237)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:145)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:84)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at ValidatePathWithParams.doCertPathValidate(ValidatePathWithParams.java:288)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at ValidatePathWithParams.validate(ValidatePathWithParams.java:142)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> ... 7 more<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Caused by: java.security.cert.CertPathValidatorException: OCSP response error: INTERNAL_ERROR<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.OCSPResponse.verify(OCSPResponse.java:386)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.OCSP.check(OCSP.java:195)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:742)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:362)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:336)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> ... 13 more<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Do you notice the issue in your jtreg tests as well ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Any hints about this ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks, Matthias<o:p></o:p></span></p>
</div>
</body>
</html>