Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8237888

security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval

XMLWordPrintable

    • b23
    • generic
    • generic
    • Not verified

        I noticed a couple of instabilities (in jdk13 and higher) in the test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java .

        The test sometimes fails when validating the “validity interval” of OCSP responses :
        Example output is like :

        certpath: OCSP response validity interval is from Wed Dec 04 01:05:27 CET 2019
        certpath: Checking validity of OCSP response on: Wed Dec 04 01:39:15 CET 2019 <--------- default interval is system time “on” machine +/- 15 minutes , this is seen as valid by OpenJDK
          …
        java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
                        at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
                        at LuxTrustCA.main(LuxTrustCA.java:186)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
                        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                        at java.base/java.lang.reflect.Method.invoke(Method.java:564)
                        at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
                        at java.base/java.lang.Thread.run(Thread.java:832)


        stdout contains :
        Received exception: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date


        Looks like there might be an issue on LuxTrust side, this should be checked (the problem is seen on various different test machines).

              mullan Sean Mullan
              mbaesken Matthias Baesken
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: