-
Bug
-
Resolution: Incomplete
-
P4
-
None
-
21
-
None
-
generic
-
generic
sun/security/lib/cacerts/VerifyCACerts.java fails on all platforms on jdk21 as follows
-----------------------------8<=============================
#section:main
----------messages:(7/235)----------
command: main VerifyCACerts
reason: Assumed action based on file name: run main VerifyCACerts
started: Mon May 19 02:27:46 CEST 2025
Mode: othervm
Process id: 1405
finished: Mon May 19 02:27:46 CEST 2025
elapsed time (seconds): 0.346
----------configuration:(0/0)----------
----------System.out:(108/3779)----------
cacerts file: /opt/work/752ef37498e1f52c/jdk-21.0.7.jdk/Contents/Home/lib/security/cacerts
Trusted CA Certificate count: 106
Verifying actalisauthenticationrootca [jdk]
Verifying addtrustexternalca [jdk]
Verifying addtrustqualifiedca [jdk]
Verifying affirmtrustcommercialca [jdk]
Verifying affirmtrustnetworkingca [jdk]
Verifying affirmtrustpremiumca [jdk]
Verifying affirmtrustpremiumeccca [jdk]
Verifying amazonrootca1 [jdk]
Verifying amazonrootca2 [jdk]
Verifying amazonrootca3 [jdk]
Verifying amazonrootca4 [jdk]
Verifying baltimorecybertrustca [jdk]
Verifying buypassclass2ca [jdk]
Verifying buypassclass3ca [jdk]
Verifying camerfirmachambersca [jdk]
Verifying camerfirmachamberscommerceca [jdk]
Verifying camerfirmachambersignca [jdk]
Verifying certignaca [jdk]
Verifying certignarootca [jdk]
Verifying certumca [jdk]
Verifying certumtrustednetworkca [jdk]
Verifying chunghwaepkirootca [jdk]
Verifying comodoaaaca [jdk]
Verifying comodoeccca [jdk]
Verifying comodorsaca [jdk]
Verifying digicertassuredidg2 [jdk]
Verifying digicertassuredidg3 [jdk]
Verifying digicertassuredidrootca [jdk]
Verifying digicertcseccrootg5 [jdk]
Verifying digicertcsrsarootg5 [jdk]
Verifying digicertglobalrootca [jdk]
Verifying digicertglobalrootg2 [jdk]
Verifying digicertglobalrootg3 [jdk]
Verifying digicerthighassuranceevrootca [jdk]
Verifying digicerttlseccrootg5 [jdk]
Verifying digicerttlsrsarootg5 [jdk]
Verifying digicerttrustedrootg4 [jdk]
Verifying dtrustclass3ca2 [jdk]
Verifying dtrustclass3ca2ev [jdk]
Verifying emsigneccrootcag3 [jdk]
Verifying emsignrootcag1 [jdk]
Verifying emsignrootcag2 [jdk]
Verifying entrust2048ca [jdk]
Verifying entrustevca [jdk]
Verifying entrustrootcaec1 [jdk]
Verifying entrustrootcag2 [jdk]
Verifying entrustrootcag4 [jdk]
Verifying geotrustglobalca [jdk]
Verifying geotrustprimaryca [jdk]
Verifying geotrustprimarycag2 [jdk]
Verifying geotrustprimarycag3 [jdk]
Verifying geotrustuniversalca [jdk]
Verifying globalsignca [jdk]
Verifying globalsigneccrootcar4 [jdk]
Verifying globalsigneccrootcar5 [jdk]
Verifying globalsignr3ca [jdk]
Verifying globalsignrootcar6 [jdk]
Verifying godaddyclass2ca [jdk]
Verifying godaddyrootg2ca [jdk]
Verifying gtsrootcar1 [jdk]
Verifying gtsrootcar2 [jdk]
Verifying gtsrootecccar3 [jdk]
Verifying gtsrootecccar4 [jdk]
Verifying haricaeccrootca2015 [jdk]
Verifying haricarootca2015 [jdk]
Verifying identrustcommercial [jdk]
Verifying identrustpublicca [jdk]
Verifying letsencryptisrgx1 [jdk]
Verifying letsencryptisrgx2 [jdk]
Verifying luxtrustglobalroot2ca [jdk]
Verifying luxtrustglobalrootca [jdk]
Verifying microsoftecc2017 [jdk]
Verifying microsoftrsa2017 [jdk]
Verifying quovadisrootca [jdk]
Verifying quovadisrootca1g3 [jdk]
Verifying quovadisrootca2 [jdk]
Verifying quovadisrootca2g3 [jdk]
Verifying quovadisrootca3 [jdk]
Verifying quovadisrootca3g3 [jdk]
Verifying secomscrootca2 [jdk]
Verifying securetrustca [jdk]
Verifying sslrooteccca [jdk]
Verifying sslrootevrsaca [jdk]
Verifying sslrootrsaca [jdk]
Verifying starfieldclass2ca [jdk]
Verifying starfieldrootg2ca [jdk]
Verifying starfieldservicesrootg2ca [jdk]
Verifying swisssigngoldg2ca [jdk]
Verifying swisssignplatinumg2ca [jdk]
Verifying swisssignsilverg2ca [jdk]
Verifying teliarootcav2 [jdk]
Verifying teliasonerarootcav1 [jdk]
Verifying thawteprimaryrootca [jdk]
Verifying thawteprimaryrootcag2 [jdk]
Verifying thawteprimaryrootcag3 [jdk]
Verifying ttelesecglobalrootclass2ca [jdk]
Verifying ttelesecglobalrootclass3ca [jdk]
Verifying twcaglobalrootca [jdk]
Verifying usertrusteccca [jdk]
Verifying usertrustrsaca [jdk]
Verifying utnuserfirstobjectca [jdk]
Verifying verisignclass3g3ca [jdk]
Verifying verisignclass3g4ca [jdk]
Verifying verisignclass3g5ca [jdk]
Verifying verisignuniversalrootca [jdk]
Verifying xrampglobalca [jdk]
----------System.err:(22/1359)----------
ERROR: wrong checksum C6:81:90:32:46:65:82:69:6B:BF:EE:C2:BE:AB:48:59:CB:2F:B6:7B:93:F2:B3:7E:A0:07:17:0C:79:F6:D9:AC
Expected checksum 21:68:E7:16:5B:94:23:D2:60:5C:BB:F2:AF:C1:66:5C:EC:36:BC:20:FF:5C:54:AF:91:D1:2C:38:AE:55:D3:27
ERROR: 106 entries, should be 112
ERROR: globalsignr46 [jdk] is not in cacerts
ERROR: certainlyroote1 [jdk] is not in cacerts
ERROR: certainlyrootr1 [jdk] is not in cacerts
ERROR: ssltlsrootecc2022 [jdk] is not in cacerts
ERROR: ssltlsrootrsa2022 [jdk] is not in cacerts
ERROR: globalsigne46 [jdk] is not in cacerts
ERROR: cert is expired but not in EXPIRY_EXC_ENTRIES
WARNING: cert "baltimorecybertrustca [jdk]" expiry "Tue May 13 01:59:00 CEST 2025" will expire within 90 days
java.lang.RuntimeException: At least one cacert test failed
at VerifyCACerts.main(VerifyCACerts.java:410)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
at java.base/java.lang.reflect.Method.invoke(Method.java:580)
at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
at java.base/java.lang.Thread.run(Thread.java:1583)
JavaTest Message: Test threw exception: java.lang.RuntimeException: At least one cacert test failed
JavaTest Message: shutting down test
STATUS:Failed.`main' threw exception: java.lang.RuntimeException: At least one cacert test failed
-----------------------------8<=============================
The issue became reproducible on the previous builds as well.
The failure was observed on all platforms/OS's.
The issue is reproducible on jdk21.0.7 and older builds.
It cannot be reproduced on the latests jdk25
*Regression*: YES. The issue was not observed before 12/05/2025
*Reproducibility*: 100%
*Steps to reproduce*
$ jtreg -v -a -testjdk:$test_jdk_home test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
-----------------------------8<=============================
#section:main
----------messages:(7/235)----------
command: main VerifyCACerts
reason: Assumed action based on file name: run main VerifyCACerts
started: Mon May 19 02:27:46 CEST 2025
Mode: othervm
Process id: 1405
finished: Mon May 19 02:27:46 CEST 2025
elapsed time (seconds): 0.346
----------configuration:(0/0)----------
----------System.out:(108/3779)----------
cacerts file: /opt/work/752ef37498e1f52c/jdk-21.0.7.jdk/Contents/Home/lib/security/cacerts
Trusted CA Certificate count: 106
Verifying actalisauthenticationrootca [jdk]
Verifying addtrustexternalca [jdk]
Verifying addtrustqualifiedca [jdk]
Verifying affirmtrustcommercialca [jdk]
Verifying affirmtrustnetworkingca [jdk]
Verifying affirmtrustpremiumca [jdk]
Verifying affirmtrustpremiumeccca [jdk]
Verifying amazonrootca1 [jdk]
Verifying amazonrootca2 [jdk]
Verifying amazonrootca3 [jdk]
Verifying amazonrootca4 [jdk]
Verifying baltimorecybertrustca [jdk]
Verifying buypassclass2ca [jdk]
Verifying buypassclass3ca [jdk]
Verifying camerfirmachambersca [jdk]
Verifying camerfirmachamberscommerceca [jdk]
Verifying camerfirmachambersignca [jdk]
Verifying certignaca [jdk]
Verifying certignarootca [jdk]
Verifying certumca [jdk]
Verifying certumtrustednetworkca [jdk]
Verifying chunghwaepkirootca [jdk]
Verifying comodoaaaca [jdk]
Verifying comodoeccca [jdk]
Verifying comodorsaca [jdk]
Verifying digicertassuredidg2 [jdk]
Verifying digicertassuredidg3 [jdk]
Verifying digicertassuredidrootca [jdk]
Verifying digicertcseccrootg5 [jdk]
Verifying digicertcsrsarootg5 [jdk]
Verifying digicertglobalrootca [jdk]
Verifying digicertglobalrootg2 [jdk]
Verifying digicertglobalrootg3 [jdk]
Verifying digicerthighassuranceevrootca [jdk]
Verifying digicerttlseccrootg5 [jdk]
Verifying digicerttlsrsarootg5 [jdk]
Verifying digicerttrustedrootg4 [jdk]
Verifying dtrustclass3ca2 [jdk]
Verifying dtrustclass3ca2ev [jdk]
Verifying emsigneccrootcag3 [jdk]
Verifying emsignrootcag1 [jdk]
Verifying emsignrootcag2 [jdk]
Verifying entrust2048ca [jdk]
Verifying entrustevca [jdk]
Verifying entrustrootcaec1 [jdk]
Verifying entrustrootcag2 [jdk]
Verifying entrustrootcag4 [jdk]
Verifying geotrustglobalca [jdk]
Verifying geotrustprimaryca [jdk]
Verifying geotrustprimarycag2 [jdk]
Verifying geotrustprimarycag3 [jdk]
Verifying geotrustuniversalca [jdk]
Verifying globalsignca [jdk]
Verifying globalsigneccrootcar4 [jdk]
Verifying globalsigneccrootcar5 [jdk]
Verifying globalsignr3ca [jdk]
Verifying globalsignrootcar6 [jdk]
Verifying godaddyclass2ca [jdk]
Verifying godaddyrootg2ca [jdk]
Verifying gtsrootcar1 [jdk]
Verifying gtsrootcar2 [jdk]
Verifying gtsrootecccar3 [jdk]
Verifying gtsrootecccar4 [jdk]
Verifying haricaeccrootca2015 [jdk]
Verifying haricarootca2015 [jdk]
Verifying identrustcommercial [jdk]
Verifying identrustpublicca [jdk]
Verifying letsencryptisrgx1 [jdk]
Verifying letsencryptisrgx2 [jdk]
Verifying luxtrustglobalroot2ca [jdk]
Verifying luxtrustglobalrootca [jdk]
Verifying microsoftecc2017 [jdk]
Verifying microsoftrsa2017 [jdk]
Verifying quovadisrootca [jdk]
Verifying quovadisrootca1g3 [jdk]
Verifying quovadisrootca2 [jdk]
Verifying quovadisrootca2g3 [jdk]
Verifying quovadisrootca3 [jdk]
Verifying quovadisrootca3g3 [jdk]
Verifying secomscrootca2 [jdk]
Verifying securetrustca [jdk]
Verifying sslrooteccca [jdk]
Verifying sslrootevrsaca [jdk]
Verifying sslrootrsaca [jdk]
Verifying starfieldclass2ca [jdk]
Verifying starfieldrootg2ca [jdk]
Verifying starfieldservicesrootg2ca [jdk]
Verifying swisssigngoldg2ca [jdk]
Verifying swisssignplatinumg2ca [jdk]
Verifying swisssignsilverg2ca [jdk]
Verifying teliarootcav2 [jdk]
Verifying teliasonerarootcav1 [jdk]
Verifying thawteprimaryrootca [jdk]
Verifying thawteprimaryrootcag2 [jdk]
Verifying thawteprimaryrootcag3 [jdk]
Verifying ttelesecglobalrootclass2ca [jdk]
Verifying ttelesecglobalrootclass3ca [jdk]
Verifying twcaglobalrootca [jdk]
Verifying usertrusteccca [jdk]
Verifying usertrustrsaca [jdk]
Verifying utnuserfirstobjectca [jdk]
Verifying verisignclass3g3ca [jdk]
Verifying verisignclass3g4ca [jdk]
Verifying verisignclass3g5ca [jdk]
Verifying verisignuniversalrootca [jdk]
Verifying xrampglobalca [jdk]
----------System.err:(22/1359)----------
ERROR: wrong checksum C6:81:90:32:46:65:82:69:6B:BF:EE:C2:BE:AB:48:59:CB:2F:B6:7B:93:F2:B3:7E:A0:07:17:0C:79:F6:D9:AC
Expected checksum 21:68:E7:16:5B:94:23:D2:60:5C:BB:F2:AF:C1:66:5C:EC:36:BC:20:FF:5C:54:AF:91:D1:2C:38:AE:55:D3:27
ERROR: 106 entries, should be 112
ERROR: globalsignr46 [jdk] is not in cacerts
ERROR: certainlyroote1 [jdk] is not in cacerts
ERROR: certainlyrootr1 [jdk] is not in cacerts
ERROR: ssltlsrootecc2022 [jdk] is not in cacerts
ERROR: ssltlsrootrsa2022 [jdk] is not in cacerts
ERROR: globalsigne46 [jdk] is not in cacerts
ERROR: cert is expired but not in EXPIRY_EXC_ENTRIES
WARNING: cert "baltimorecybertrustca [jdk]" expiry "Tue May 13 01:59:00 CEST 2025" will expire within 90 days
java.lang.RuntimeException: At least one cacert test failed
at VerifyCACerts.main(VerifyCACerts.java:410)
at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
at java.base/java.lang.reflect.Method.invoke(Method.java:580)
at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
at java.base/java.lang.Thread.run(Thread.java:1583)
JavaTest Message: Test threw exception: java.lang.RuntimeException: At least one cacert test failed
JavaTest Message: shutting down test
STATUS:Failed.`main' threw exception: java.lang.RuntimeException: At least one cacert test failed
-----------------------------8<=============================
The issue became reproducible on the previous builds as well.
The failure was observed on all platforms/OS's.
The issue is reproducible on jdk21.0.7 and older builds.
It cannot be reproduced on the latests jdk25
*Regression*: YES. The issue was not observed before 12/05/2025
*Reproducibility*: 100%
*Steps to reproduce*
$ jtreg -v -a -testjdk:$test_jdk_home test/jdk/sun/security/lib/cacerts/VerifyCACerts.java