Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8013915

Cert is regarded as expired (but TSA valid) although no certs in chain is expired.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P4
    • Resolution: Duplicate
    • Affects Version/s: 7u25
    • Fix Version/s: 7u40
    • Component/s: deploy

      Description

      Steps to reproduce:
      1. Install the latest 7u25 nightly build
      2. Switch java console on
      3. access http://java.com/zh_CN/download/installed.jsp?detect=jre
      4. If you see the following log in java console, then the issue is reproduced:
      ===============
      security: The certificate has expired, need to check timestamping info
      security: Timestamping info is available
      security: The certificate has expired, and is timestamped in valid period
      security: Start checking TSA certificate path
      security: Even though certificate has expired, it is timestamped in valid period and has valid TSA
      ===============

      Screenshot is attached.(MI-CASigned-NonSandboxed.jpg)

      Expected:
      There's no cert actually expired in the certs chain, so the certificate should not be regarded as expired.

      Expected screenshot for dialog "More Information" is also attached. (MI-CASignedSandboxed.jpg)

      NOTE: this issue could be a duplicate of https://jbs.oracle.com/bugs/browse/JDK-8007938. But still I'd like to log it in case the root cause is (slightly) different.

        Attachments

          Activity

            People

            Assignee:
            herrick Andy Herrick
            Reporter:
            stephenh Stephen Hu (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: