-
Bug
-
Resolution: Duplicate
-
P4
-
7u25
Steps to reproduce:
1. Install the latest 7u25 nightly build
2. Switch java console on
3. access http://java.com/zh_CN/download/installed.jsp?detect=jre
4. If you see the following log in java console, then the issue is reproduced:
===============
security: The certificate has expired, need to check timestamping info
security: Timestamping info is available
security: The certificate has expired, and is timestamped in valid period
security: Start checking TSA certificate path
security: Even though certificate has expired, it is timestamped in valid period and has valid TSA
===============
Screenshot is attached.(MI-CASigned-NonSandboxed.jpg)
Expected:
There's no cert actually expired in the certs chain, so the certificate should not be regarded as expired.
Expected screenshot for dialog "More Information" is also attached. (MI-CASignedSandboxed.jpg)
NOTE: this issue could be a duplicate of https://jbs.oracle.com/bugs/browse/JDK-8007938. But still I'd like to log it in case the root cause is (slightly) different.
1. Install the latest 7u25 nightly build
2. Switch java console on
3. access http://java.com/zh_CN/download/installed.jsp?detect=jre
4. If you see the following log in java console, then the issue is reproduced:
===============
security: The certificate has expired, need to check timestamping info
security: Timestamping info is available
security: The certificate has expired, and is timestamped in valid period
security: Start checking TSA certificate path
security: Even though certificate has expired, it is timestamped in valid period and has valid TSA
===============
Screenshot is attached.(MI-CASigned-NonSandboxed.jpg)
Expected:
There's no cert actually expired in the certs chain, so the certificate should not be regarded as expired.
Expected screenshot for dialog "More Information" is also attached. (MI-CASignedSandboxed.jpg)
NOTE: this issue could be a duplicate of https://jbs.oracle.com/bugs/browse/JDK-8007938. But still I'd like to log it in case the root cause is (slightly) different.