Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8013915

Cert is regarded as expired (but TSA valid) although no certs in chain is expired.

XMLWordPrintable

      Steps to reproduce:
      1. Install the latest 7u25 nightly build
      2. Switch java console on
      3. access http://java.com/zh_CN/download/installed.jsp?detect=jre
      4. If you see the following log in java console, then the issue is reproduced:
      ===============
      security: The certificate has expired, need to check timestamping info
      security: Timestamping info is available
      security: The certificate has expired, and is timestamped in valid period
      security: Start checking TSA certificate path
      security: Even though certificate has expired, it is timestamped in valid period and has valid TSA
      ===============

      Screenshot is attached.(MI-CASigned-NonSandboxed.jpg)

      Expected:
      There's no cert actually expired in the certs chain, so the certificate should not be regarded as expired.

      Expected screenshot for dialog "More Information" is also attached. (MI-CASignedSandboxed.jpg)

      NOTE: this issue could be a duplicate of https://jbs.oracle.com/bugs/browse/JDK-8007938. But still I'd like to log it in case the root cause is (slightly) different.

            herrick Andy Herrick (Inactive)
            stephenh Stephen Hu (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: