Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8366176

java/security/cert/CertPathValidator/certification/CAInterop.java#actalisauthenticationrootca fails when run manually

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P3 P3
    • None
    • 11, 17, 21, 26
    • security-libs

      The test fails with:

      certpath[0x22|MainThread|X509CertSelector.java:1996|2025-08-26 15:07:47.794]: X509CertSelector.match: subject DNs don't match
      certpath[0x22|MainThread|ForwardBuilder.java:341|2025-08-26 15:07:47.794]: ForwardBuilder.getMatchingCACerts: found 0 CA certs
      certpath[0x22|MainThread|SunCertPathBuilder.java:272|2025-08-26 15:07:47.794]: SunCertPathBuilder.depthFirstSearchForward(): certs.size=0
      certpath[0x22|MainThread|SunCertPathBuilder.java:556|2025-08-26 15:07:47.794]: SunCertPathBuilder.depthFirstSearchForward(): backtracking
      java.lang.RuntimeException: Unhandled exception
      at ValidatePathWithURL.validateDomainCertChain(ValidatePathWithURL.java:176)
      at ValidatePathWithURL.validateDomain(ValidatePathWithURL.java:128)
      at CAInterop.validate(CAInterop.java:800)
      at CAInterop.main(CAInterop.java:738)
      at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
      at java.base/java.lang.reflect.Method.invoke(Method.java:565)
      at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
      at java.base/java.lang.Thread.run(Thread.java:1474)
      Caused by: javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:376)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:319)
      at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:651)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:471)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:367)
      at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:421)
      at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477)
      at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448)
      at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199)
      at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
      at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
      at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
      at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
      at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
      at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:483)
      at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
      at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141)
      at ValidatePathWithURL.validateDomainCertChain(ValidatePathWithURL.java:142)
      ... 7 more
      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
      at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:270)
      at java.base/sun.security.validator.Validator.validate(Validator.java:256)
      at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:230)
      at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
      at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:635)
      ... 22 more
      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
      at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
      at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:299)
      at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
      ... 27 more

            rhalade Rajan Halade
            sgehwolf Severin Gehwolf
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: