Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8268678

LetsEncryptCA.java test fails as Let’s Encrypt Authority X3 is retired

    XMLWordPrintable

Details

    Backports

      Description

        The test "test/jdk/security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java" fails with the following exception:

        ==================================

        certpath: OCSP response validity interval is from Tue Jun 09 22:00:00 UTC 2020 until Wed Jun 09 00:00:00 UTC 2021
        certpath: Checking validity of OCSP response on Mon Jun 14 12:58:58 UTC 2021 with allowed interval between Mon Jun 14 12:43:58 UTC 2021 and Mon Jun 14 13:13:58 UTC 2021
        certpath: X509CertSelector.match(SN: 9b7e0649a33e62b9d5ee90487129ef57
          Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
          Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US)
        certpath: X509CertSelector.match: subject DNs don't match
        certpath: X509CertSelector.match(SN: 10020
          Issuer: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
          Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL)
        certpath: X509CertSelector.match: subject DNs don't match
        java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
        at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
        at LetsEncryptCA.main(LetsEncryptCA.java:172)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:568)
        at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
        at java.base/java.lang.Thread.run(Thread.java:833)
        Caused by: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224)
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144)
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83)
        at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)
        at ValidatePathWithParams.doCertPathValidate(ValidatePathWithParams.java:288)
        at ValidatePathWithParams.validate(ValidatePathWithParams.java:142)
        ... 7 more
        Caused by: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
        at java.base/sun.security.provider.certpath.OCSPResponse.verify(OCSPResponse.java:617)
        at java.base/sun.security.provider.certpath.OCSP.check(OCSP.java:199)
        at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:785)
        at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:369)
        at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:343)
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
        ... 13 more

        JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
        JavaTest Message: shutting down test

        STATUS:Failed.`main' threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status

        ==================================

        Attachments

          Issue Links

            Activity

              People

                rhalade Rajan Halade
                tvoniadka Thejasvi Voniadka (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: