-
Bug
-
Resolution: Duplicate
-
P3
-
8u131
DRS jar becomes invalid Oct 30, 2017 because the timestamp cert expired, which should not happened as the jar signing cert is good and timestamped.
The logs contain the following output:
...
security: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
security: The certificate has expired, but TSA is not valid
...
ruleset: Exception parsing deployment rule set com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
at com.sun.deploy.security.ruleset.DeploymentRuleSet.verifyRuleSetFile(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.validateDRS(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.initialize(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Thu Oct 16 19:59:59 EDT 2014
at sun.security.x509.CertificateValidity.valid(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
... 7 more
com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
at com.sun.deploy.security.ruleset.DeploymentRuleSet.verifyRuleSetFile(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.validateDRS(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.initialize(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Thu Oct 16 19:59:59 EDT 2014
at sun.security.x509.CertificateValidity.valid(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
... 7 more
The logs contain the following output:
...
security: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
security: The certificate has expired, but TSA is not valid
...
ruleset: Exception parsing deployment rule set com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
at com.sun.deploy.security.ruleset.DeploymentRuleSet.verifyRuleSetFile(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.validateDRS(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.initialize(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Thu Oct 16 19:59:59 EDT 2014
at sun.security.x509.CertificateValidity.valid(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
... 7 more
com.sun.deploy.security.BlockedException: Can not verify Deployment Rule Set jar due to certificate expiration
at com.sun.deploy.security.ruleset.DeploymentRuleSet.verifyRuleSetFile(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.validateDRS(Unknown Source)
at com.sun.deploy.security.ruleset.DeploymentRuleSet$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at com.sun.deploy.security.ruleset.DeploymentRuleSet.initialize(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Thu Oct 16 19:59:59 EDT 2014
at sun.security.x509.CertificateValidity.valid(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at sun.security.x509.X509CertImpl.checkValidity(Unknown Source)
at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
at com.sun.deploy.security.TrustDecider.getJarValidationState(Unknown Source)
... 7 more