United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-7038175 Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures
JDK-7038175 : Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures

Details
Type:
Bug
Submit Date:
2011-04-20
Status:
Closed
Updated Date:
2013-09-02
Project Name:
JDK
Resolved Date:
2011-06-22
Component:
security-libs
OS:
generic,solaris_10
Sub-Component:
java.security
CPU:
x86,generic
Priority:
P2
Resolution:
Fixed
Affected Versions:
5.0,6,7,8
Fixed Versions:

Related Reports
Backport:
Backport:
Backport:
Duplicate:

Sub Tasks

Description
Several JDK regression tests have started to fail because the certificates used in the tests have expired on Tue Apr 19 10:57:20 EDT 2011.

These tests all use test certificates from the PKITS test suite.

                                    

Comments
SUGGESTED FIX

Modify the tests to set the validity date (using PKIXParameters.setValidity) to a time in the past, within the validity period of the certificate.
                                     
2011-04-20
SUGGESTED FIX

http://closedjdk.us.oracle.com/jdk7/tl/jdk/test/closed/rev/c891087a43f6
                                     
2011-04-21
EVALUATION

See suggested fix.  I also had to modify the DistributionPointFetcher to set the validity date when building the CRL issuer's certification path. 
*** (#1 of 1): [ UNSAVED ] ###@###.###
                                     
2011-04-21
SUGGESTED FIX

http://hg.openjdk.java.net/jdk7/tl/jdk/rev/2c46bf0a462c
                                     
2011-04-22



Hardware and Software, Engineered to Work Together