Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8237888

security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval

    XMLWordPrintable

    Details

    • Subcomponent:
    • Resolved In Build:
      b23
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Backports

        Description

        I noticed a couple of instabilities (in jdk13 and higher) in the test security/infra/java/security/cert/CertPathValidator/certification/LuxTrustCA.java .

        The test sometimes fails when validating the “validity interval” of OCSP responses :
        Example output is like :

        certpath: OCSP response validity interval is from Wed Dec 04 01:05:27 CET 2019
        certpath: Checking validity of OCSP response on: Wed Dec 04 01:39:15 CET 2019 <--------- default interval is system time “on” machine +/- 15 minutes , this is seen as valid by OpenJDK
          …
        java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
                        at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
                        at LuxTrustCA.main(LuxTrustCA.java:186)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
                        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
                        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                        at java.base/java.lang.reflect.Method.invoke(Method.java:564)
                        at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
                        at java.base/java.lang.Thread.run(Thread.java:832)


        stdout contains :
        Received exception: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date


        Looks like there might be an issue on LuxTrust side, this should be checked (the problem is seen on various different test machines).

          Attachments

            Issue Links

            There are no Sub-Tasks for this issue.

              Activity

                People

                Assignee:
                mullan Sean Mullan
                Reporter:
                mbaesken Matthias Baesken
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: