Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8237888

security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval

    XMLWordPrintable

    Details

    • Subcomponent:
    • Resolved In Build:
      b23
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Backports

        Description

        I noticed a couple of instabilities (in jdk13 and higher) in the test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java .

        The test sometimes fails when validating the “validity interval” of OCSP responses :
        Example output is like :

        certpath: OCSP response validity interval is from Wed Dec 04 01:05:27 CET 2019
        certpath: Checking validity of OCSP response on: Wed Dec 04 01:39:15 CET 2019 <--------- default interval is system time “on” machine +/- 15 minutes , this is seen as valid by OpenJDK
          …
        java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
                        at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
                        at LuxTrustCA.main(LuxTrustCA.java:186)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
                        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                        at java.base/java.lang.reflect.Method.invoke(Method.java:564)
                        at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
                        at java.base/java.lang.Thread.run(Thread.java:832)


        stdout contains :
        Received exception: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date


        Looks like there might be an issue on LuxTrust side, this should be checked (the problem is seen on various different test machines).

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                mullan Sean Mullan
                Reporter:
                mbaesken Matthias Baesken
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: