JDK-8207321 : Merge error with 8199779
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 12
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2018-07-15
  • Updated: 2018-09-18
  • Resolved: 2018-07-16
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 12
12 b03Fixed
Related Reports
Relates :  
JDK-8207311 - Add T-Systems, GlobalSign and Starfield services root certificates
Relates :  
JDK-8199779 - Add T-Systems, GlobalSign and Starfield services root certificates
Description
jdk/lib/security/cacerts/VerifyCACerts.java failed with "At least one cacert test failed"

----------System.err:(20/1107)----------
ERROR: 83 entries, should be 90
ERROR: globalsignca [jdk] is not in cacerts
ERROR: globalsignr3ca [jdk] is not in cacerts
ERROR: ttelesecglobalrootclass2ca [jdk] is not in cacerts
ERROR: deutschetelekomrootca2 [jdk] is not in cacerts
ERROR: starfieldservicesrootg2ca [jdk] is not in cacerts
ERROR: globalsigneccrootcar5 [jdk] is not in cacerts
ERROR: ttelesecglobalrootclass3ca [jdk] is not in cacerts
java.lang.Exception: At least one cacert test failed
	at VerifyCACerts.main(VerifyCACerts.java:317)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
	at com.sun.javatest.regtest.agent.MainActionHelper$SameVMRunnable.run(MainActionHelper.java:229)
	at java.base/java.lang.Thread.run(Thread.java:834)
Comments
[~jwilhelm], this appears to be caused by a merge error. The backport to 12 merged in an older version of the cacerts keystore without the new entries. Reassigning to Jesper.
16-07-2018
Bumping from P3 -> P2 since this failure has happened in the last 4 tier2 job sets (jdk12-jdk.68 -> jdk12-jdk.71). That makes this a noisy failure. If a fix cannot be done quickly, please ProblemList this test using a sub-task of this bug and push that changeset as soon as possible.
16-07-2018