Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8357195

sun/security/lib/cacerts/VerifyCACerts.java fails due wrong checksum

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Incomplete
    • Icon: P4 P4
    • None
    • 21
    • security-libs
    • None

      sun/security/lib/cacerts/VerifyCACerts.java fails on all platforms on jdk21 as follows

      -----------------------------8<=============================

      #section:main
      ----------messages:(7/235)----------
      command: main VerifyCACerts
      reason: Assumed action based on file name: run main VerifyCACerts
      started: Mon May 19 02:27:46 CEST 2025
      Mode: othervm
      Process id: 1405
      finished: Mon May 19 02:27:46 CEST 2025
      elapsed time (seconds): 0.346
      ----------configuration:(0/0)----------
      ----------System.out:(108/3779)----------
      cacerts file: /opt/work/752ef37498e1f52c/jdk-21.0.7.jdk/Contents/Home/lib/security/cacerts
      Trusted CA Certificate count: 106
      Verifying actalisauthenticationrootca [jdk]
      Verifying addtrustexternalca [jdk]
      Verifying addtrustqualifiedca [jdk]
      Verifying affirmtrustcommercialca [jdk]
      Verifying affirmtrustnetworkingca [jdk]
      Verifying affirmtrustpremiumca [jdk]
      Verifying affirmtrustpremiumeccca [jdk]
      Verifying amazonrootca1 [jdk]
      Verifying amazonrootca2 [jdk]
      Verifying amazonrootca3 [jdk]
      Verifying amazonrootca4 [jdk]
      Verifying baltimorecybertrustca [jdk]
      Verifying buypassclass2ca [jdk]
      Verifying buypassclass3ca [jdk]
      Verifying camerfirmachambersca [jdk]
      Verifying camerfirmachamberscommerceca [jdk]
      Verifying camerfirmachambersignca [jdk]
      Verifying certignaca [jdk]
      Verifying certignarootca [jdk]
      Verifying certumca [jdk]
      Verifying certumtrustednetworkca [jdk]
      Verifying chunghwaepkirootca [jdk]
      Verifying comodoaaaca [jdk]
      Verifying comodoeccca [jdk]
      Verifying comodorsaca [jdk]
      Verifying digicertassuredidg2 [jdk]
      Verifying digicertassuredidg3 [jdk]
      Verifying digicertassuredidrootca [jdk]
      Verifying digicertcseccrootg5 [jdk]
      Verifying digicertcsrsarootg5 [jdk]
      Verifying digicertglobalrootca [jdk]
      Verifying digicertglobalrootg2 [jdk]
      Verifying digicertglobalrootg3 [jdk]
      Verifying digicerthighassuranceevrootca [jdk]
      Verifying digicerttlseccrootg5 [jdk]
      Verifying digicerttlsrsarootg5 [jdk]
      Verifying digicerttrustedrootg4 [jdk]
      Verifying dtrustclass3ca2 [jdk]
      Verifying dtrustclass3ca2ev [jdk]
      Verifying emsigneccrootcag3 [jdk]
      Verifying emsignrootcag1 [jdk]
      Verifying emsignrootcag2 [jdk]
      Verifying entrust2048ca [jdk]
      Verifying entrustevca [jdk]
      Verifying entrustrootcaec1 [jdk]
      Verifying entrustrootcag2 [jdk]
      Verifying entrustrootcag4 [jdk]
      Verifying geotrustglobalca [jdk]
      Verifying geotrustprimaryca [jdk]
      Verifying geotrustprimarycag2 [jdk]
      Verifying geotrustprimarycag3 [jdk]
      Verifying geotrustuniversalca [jdk]
      Verifying globalsignca [jdk]
      Verifying globalsigneccrootcar4 [jdk]
      Verifying globalsigneccrootcar5 [jdk]
      Verifying globalsignr3ca [jdk]
      Verifying globalsignrootcar6 [jdk]
      Verifying godaddyclass2ca [jdk]
      Verifying godaddyrootg2ca [jdk]
      Verifying gtsrootcar1 [jdk]
      Verifying gtsrootcar2 [jdk]
      Verifying gtsrootecccar3 [jdk]
      Verifying gtsrootecccar4 [jdk]
      Verifying haricaeccrootca2015 [jdk]
      Verifying haricarootca2015 [jdk]
      Verifying identrustcommercial [jdk]
      Verifying identrustpublicca [jdk]
      Verifying letsencryptisrgx1 [jdk]
      Verifying letsencryptisrgx2 [jdk]
      Verifying luxtrustglobalroot2ca [jdk]
      Verifying luxtrustglobalrootca [jdk]
      Verifying microsoftecc2017 [jdk]
      Verifying microsoftrsa2017 [jdk]
      Verifying quovadisrootca [jdk]
      Verifying quovadisrootca1g3 [jdk]
      Verifying quovadisrootca2 [jdk]
      Verifying quovadisrootca2g3 [jdk]
      Verifying quovadisrootca3 [jdk]
      Verifying quovadisrootca3g3 [jdk]
      Verifying secomscrootca2 [jdk]
      Verifying securetrustca [jdk]
      Verifying sslrooteccca [jdk]
      Verifying sslrootevrsaca [jdk]
      Verifying sslrootrsaca [jdk]
      Verifying starfieldclass2ca [jdk]
      Verifying starfieldrootg2ca [jdk]
      Verifying starfieldservicesrootg2ca [jdk]
      Verifying swisssigngoldg2ca [jdk]
      Verifying swisssignplatinumg2ca [jdk]
      Verifying swisssignsilverg2ca [jdk]
      Verifying teliarootcav2 [jdk]
      Verifying teliasonerarootcav1 [jdk]
      Verifying thawteprimaryrootca [jdk]
      Verifying thawteprimaryrootcag2 [jdk]
      Verifying thawteprimaryrootcag3 [jdk]
      Verifying ttelesecglobalrootclass2ca [jdk]
      Verifying ttelesecglobalrootclass3ca [jdk]
      Verifying twcaglobalrootca [jdk]
      Verifying usertrusteccca [jdk]
      Verifying usertrustrsaca [jdk]
      Verifying utnuserfirstobjectca [jdk]
      Verifying verisignclass3g3ca [jdk]
      Verifying verisignclass3g4ca [jdk]
      Verifying verisignclass3g5ca [jdk]
      Verifying verisignuniversalrootca [jdk]
      Verifying xrampglobalca [jdk]
      ----------System.err:(22/1359)----------
      ERROR: wrong checksum C6:81:90:32:46:65:82:69:6B:BF:EE:C2:BE:AB:48:59:CB:2F:B6:7B:93:F2:B3:7E:A0:07:17:0C:79:F6:D9:AC
      Expected checksum 21:68:E7:16:5B:94:23:D2:60:5C:BB:F2:AF:C1:66:5C:EC:36:BC:20:FF:5C:54:AF:91:D1:2C:38:AE:55:D3:27
      ERROR: 106 entries, should be 112
      ERROR: globalsignr46 [jdk] is not in cacerts
      ERROR: certainlyroote1 [jdk] is not in cacerts
      ERROR: certainlyrootr1 [jdk] is not in cacerts
      ERROR: ssltlsrootecc2022 [jdk] is not in cacerts
      ERROR: ssltlsrootrsa2022 [jdk] is not in cacerts
      ERROR: globalsigne46 [jdk] is not in cacerts
      ERROR: cert is expired but not in EXPIRY_EXC_ENTRIES
      WARNING: cert "baltimorecybertrustca [jdk]" expiry "Tue May 13 01:59:00 CEST 2025" will expire within 90 days
      java.lang.RuntimeException: At least one cacert test failed
      at VerifyCACerts.main(VerifyCACerts.java:410)
      at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
      at java.base/java.lang.reflect.Method.invoke(Method.java:580)
      at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
      at java.base/java.lang.Thread.run(Thread.java:1583)

      JavaTest Message: Test threw exception: java.lang.RuntimeException: At least one cacert test failed
      JavaTest Message: shutting down test

      STATUS:Failed.`main' threw exception: java.lang.RuntimeException: At least one cacert test failed

      -----------------------------8<=============================

      The issue became reproducible on the previous builds as well.

      The failure was observed on all platforms/OS's.
      The issue is reproducible on jdk21.0.7 and older builds.
      It cannot be reproduced on the latests jdk25

      *Regression*: YES. The issue was not observed before 12/05/2025
      *Reproducibility*: 100%
      *Steps to reproduce*
      $ jtreg -v -a -testjdk:$test_jdk_home test/jdk/sun/security/lib/cacerts/VerifyCACerts.java

            rhalade Rajan Halade
            vprovodin Vitaly Provodin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: