Skip to content

Regenerate expired certificates in subjalt.jks#2965

Open
gnodet wants to merge 1 commit intomainfrom
fix-expired-subjalt-certs
Open

Regenerate expired certificates in subjalt.jks#2965
gnodet wants to merge 1 commit intomainfrom
fix-expired-subjalt-certs

Conversation

@gnodet
Copy link
Contributor

@gnodet gnodet commented Mar 12, 2026

Summary

  • Four of the five certificates in testutils/src/test/resources/keys/subjalt.jks expired on December 15, 2024
  • This causes HostnameVerificationTest and HostnameVerificationDeprecatedTest to fail with SSL handshake errors
  • Regenerated the four expired certificates (subjaltmatch, subjaltnomatch, nosubjaltcnmatch, nosubjaltcnnomatch) with identical DN/SAN values and 10-year validity (until 2036)
  • The fifth certificate (nosubjaltcnmatchwildcard) remains valid until 2028 and was not changed

Test plan

  • CI passes: HostnameVerificationTest and HostnameVerificationDeprecatedTest should now succeed
  • Verify no other tests are affected by the certificate regeneration

🤖 Generated with Claude Code

…onTest

Four of the five certificates in subjalt.jks (subjaltmatch, subjaltnomatch,
nosubjaltcnmatch, nosubjaltcnnomatch) expired on December 15, 2024, causing
HostnameVerificationTest and HostnameVerificationDeprecatedTest to fail.

Regenerated all four certificates with the same DN and SAN values,
using 10-year validity (until 2036). The fifth certificate
(nosubjaltcnmatchwildcard) remains valid until 2028 and was not changed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@gnodet gnodet added the bug label Mar 12, 2026
@gnodet gnodet marked this pull request as ready for review March 12, 2026 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant