Bug ID: JDK-8248899 security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 11	JDK 17	JDK 18	JDK 7	JDK 8
11.0.14-oracleFixed	17.0.1Fixed	18 b09Fixed	7u331Fixed	8u321Fixed

The jdk jtreg test
security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java
 
fails currently , stdout  (from jdk/jdk   , jdk11 is similar)   contains this :
 
=====================================================
CONFIGURATION
=====================================================
http.proxyHost :null
http.proxyPort :null
https.proxyHost :null
https.proxyPort :null
https.socksProxyHost :null
https.socksProxyPort :null
jdk.certpath.disabledAlgorithms :MD2, MD5, SHA1 jdkCA & usage TLSServer, RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, include jdk.disabled.namedCurves
Revocation options :[NO_FALLBACK]
OCSP responder set :null
Trusted root set: false
Expected EE Status:GOOD
=====================================================
Received exception: java.security.cert.CertPathValidatorException: Certificate has been revoked, reason: SUPERSEDED, revocation date: Fri Jul 03 20:50:28 CEST 2020, authority: CN=QuoVadis OCSP Authority Signature, OU=OCSP Responder, O=QuoVadis Limited, C=BM, extension OIDs: []
Expected Certificate status: GOOD
Certificate status after validation: REVOKED

Fix Request (11u) Enables the test back and keeps parity with 11.0.14-oracle. Patch does not apply cleanly due to trivial conflict in ProblemList. 11u RFR acked by phh.
24-08-2021
Fix request (17u): Please approve backport to 17u. The test fails in 17u, and this would fix it. Patch applies clean, and test passes post fix.
18-08-2021
Changeset: d6bb8461 Author: Rajan Halade <rhalade@openjdk.org> Date: 2021-07-30 20:16:32 +0000 URL: https://git.openjdk.java.net/jdk/commit/d6bb846159be7e46fba0c3ca2915617f945e0b42
30-07-2021
We are still waiting for CA to provide us updated test artifacts after acknowledging the issue.
02-10-2020
The same issue was observed on the build 14.0.2+12-46 ===================================================== CONFIGURATION ===================================================== http.proxyHost :null http.proxyPort :null https.proxyHost :null https.proxyPort :null https.socksProxyHost :null https.socksProxyPort :null jdk.certpath.disabledAlgorithms :MD2, MD5, SHA1 jdkCA & usage TLSServer, RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, include jdk.disabled.namedCurves Revocation options :[NO_FALLBACK] OCSP responder set :null Trusted root set: false Expected EE Status:GOOD ===================================================== Received exception: java.security.cert.CertPathValidatorException: Certificate has been revoked, reason: SUPERSEDED, revocation date: Sat Jul 04 01:50:28 NOVT 2020, authority: CN=QuoVadis OCSP Authority Signature, OU=OCSP Responder, O=QuoVadis Limited, C=BM, extension OIDs: [] Expected Certificate status: GOOD Certificate status after validation: REVOKED
22-09-2020
The intermediate CA certificate is revoked so we need new chain from CA. Waiting for response.... CN=QuoVadis QVRCA1G3 SSL ICA, O=QuoVadis Limited, C=BM certpath: Revocation time: Fri Jul 03 11:50:28 PDT 2020 certpath: Revocation reason: SUPERSEDED certpath: thisUpdate: Mon Aug 24 12:57:41 PDT 2020 certpath: nextUpdate: Wed Aug 26 12:57:41 PDT 2020 certpath: OCSP response cert #1: CN=QuoVadis OCSP Authority Signature, OU=OCSP Responder, O=QuoVadis Limited, C=BM certpath: Status of certificate (with serial number 665770714441453215078837267228161129945561495983) is: REVOKED
24-08-2020
CA published test site is not reachable so we will need to reach out to CA to request updated test artifacts.
14-07-2020

Relates :	JDK-8239119 - Update expired test certificates for CA certification tests
Relates :	JDK-8263069 - Exclude some failing tests from security/infra/java/security/cert/CertPathValidator