Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8237888

security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval

XMLWordPrintable

    • b23
    • generic
    • generic
    • Not verified

        I noticed a couple of instabilities (in jdk13 and higher) in the test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java .

        The test sometimes fails when validating the “validity interval” of OCSP responses :
        Example output is like :

        certpath: OCSP response validity interval is from Wed Dec 04 01:05:27 CET 2019
        certpath: Checking validity of OCSP response on: Wed Dec 04 01:39:15 CET 2019 <--------- default interval is system time “on” machine +/- 15 minutes , this is seen as valid by OpenJDK
          …
        java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
                        at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
                        at LuxTrustCA.main(LuxTrustCA.java:186)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
                        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                        at java.base/java.lang.reflect.Method.invoke(Method.java:564)
                        at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
                        at java.base/java.lang.Thread.run(Thread.java:832)


        stdout contains :
        Received exception: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date


        Looks like there might be an issue on LuxTrust side, this should be checked (the problem is seen on various different test machines).

          There are no Sub-Tasks for this issue.

              mullan Sean Mullan
              mbaesken Matthias Baesken
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: