Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Relax VerifyCACerts expiry condition #294

Merged
merged 1 commit into from Nov 2, 2022

Conversation

Rudometov
Copy link
Contributor

Description

Backport corretto/corretto-jdk@13cbe35
Relax VerifyCACerts expiry condition

Basically, avoid noise from this test failing a lot, without any
action required to resolve it on our end.

As described in the comment, the current condition (at least 90 days
before expiry, otherwise fail), is unhelpfully strict. It makes sense
for upstream OpenJDK, since they use this as an early warning to take
an action, but we rely on OpenJDK and Amazon Linux to manage the
certificates for us so we do not take action when this condition fails,
at the moment.

So, relax the condition a little to wait for the cert to be 90 days
*past* expiry before failing, at which point something has definitely
gone wrong and we want to investigate.
@Rudometov Rudometov merged commit f5e149d into corretto:develop Nov 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants