Skip to content
Permalink
Browse files

8237962: give better error output for invalid OCSP response intervals…

… in CertPathValidator checks

Reviewed-by: clanger, mullan
  • Loading branch information
Matthias Baesken
Matthias Baesken committed Feb 3, 2020
1 parent edd2861 commit ef41763d32d0eb1e5a1b4313cebf14be1bcca49f
@@ -1,5 +1,5 @@
/*
* Copyright (c) 2003, 2017, Oracle and/or its affiliates. All rights reserved.
* Copyright (c) 2003, 2020, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
@@ -599,8 +599,9 @@ void verify(List<CertId> certIds, IssuerInfo issuerInfo,
}
debug.println("OCSP response validity interval is from " +
sr.thisUpdate + until);
debug.println("Checking validity of OCSP response on: " +
new Date(now));
debug.println("Checking validity of OCSP response on " +
new Date(now) + " with allowed interval between " +
nowMinusSkew + " and " + nowPlusSkew);
}

// Check that the test date is within the validity interval:
@@ -1,5 +1,5 @@
/*
* Copyright (c) 2017, 2019, Oracle and/or its affiliates. All rights reserved.
* Copyright (c) 2017, 2020, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
@@ -175,7 +175,7 @@ public void validate(String[] certsToValidate,
certStatus = Status.EXPIRED;
} else {
throw new RuntimeException(
"TEST FAILED: couldn't determine EE certificate status");
"TEST FAILED: couldn't determine EE certificate status", cpve);
}
}

0 comments on commit ef41763

Please sign in to comment.