Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java TEST FAILED: unexpected revocation date #14878

Open
JasonFengJ9 opened this issue Apr 7, 2022 · 11 comments
Open

security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java TEST FAILED: unexpected revocation date #14878

JasonFengJ9 opened this issue Apr 7, 2022 · 11 comments
Labels
test failure triageRequired

Comments

@JasonFengJ9
Copy link
Member

Failure link

From an internal build job/Test_openjdk11_j9_extended.openjdk_aarch64_mac/1/(macaarch64rt7):

openjdk version "11.0.15-ea" 2022-04-19
IBM Semeru Runtime Open Edition 11.0.15.0-m2 (build 11.0.15-ea+8)
Eclipse OpenJ9 VM 11.0.15.0-m2 (build openj9-0.32.0-m2, JRE 11 Mac OS X aarch64-64-Bit 20220405_25 (JIT enabled, AOT enabled)
OpenJ9   - 959fc5030
OMR      - ab24b6666
JCL      - f84454d938 based on jdk-11.0.15+8)

Rerun in Grinder - Change TARGET to run only the failed test targets.

Optional info

Failure output (captured from console output)

[2022-04-05T21:11:58.470Z] variation: Mode650
[2022-04-05T21:11:58.470Z] JVM_OPTIONS:  -XX:-UseCompressedOops 

[2022-04-05T21:12:04.249Z] TEST: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java

[2022-04-05T21:12:04.257Z] certpath: Verified signature of OCSP Response
[2022-04-05T21:12:04.257Z] certpath: OCSP response validity interval is from Sat Apr 02 19:12:35 EDT 2022 until Sat Apr 09 20:12:35 EDT 2022
[2022-04-05T21:12:04.257Z] certpath: Checking validity of OCSP response on Tue Apr 05 17:12:04 EDT 2022 with allowed interval between Tue Apr 05 16:57:04 EDT 2022 and Tue Apr 05 17:27:04 EDT 2022
[2022-04-05T21:12:04.257Z] java.lang.RuntimeException: TEST FAILED: unexpected revocation date
[2022-04-05T21:12:04.257Z] 	at ValidatePathWithParams.validate(ValidatePathWithParams.java:206)
[2022-04-05T21:12:04.257Z] 	at AmazonCA_2.runTest(AmazonCA.java:345)
[2022-04-05T21:12:04.257Z] 	at AmazonCA.main(AmazonCA.java:65)
[2022-04-05T21:12:04.257Z] 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[2022-04-05T21:12:04.257Z] 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
[2022-04-05T21:12:04.257Z] 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
[2022-04-05T21:12:04.257Z] 	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
[2022-04-05T21:12:04.257Z] 	at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
[2022-04-05T21:12:04.257Z] 	at java.base/java.lang.Thread.run(Thread.java:871)
[2022-04-05T21:12:04.257Z] 
[2022-04-05T21:12:04.257Z] JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: unexpected revocation date

[2022-04-05T21:12:12.665Z] jdk_security_infra_1_FAILED

Might be related to #12218 adoptium/temurin-build#2527
@AdamBrousseau
Copy link
Contributor

Possibly due to adoptium/temurin-build#2884

@pshipton
Copy link
Member

pshipton commented Apr 7, 2022

@JasonFengJ9 is this all platforms?

@JasonFengJ9
Copy link
Member Author

is this all platforms?

only seen at aarch64_mac

@pshipton
Copy link
Member

pshipton commented Apr 7, 2022

It's off by one second. Maybe just a timing issue with the test. Pls try a small grinder.

17:12:04  Certificate revocation date:Mon Jan 28 18:38:56 EST 2019
17:12:04  Expected revocation date:Mon Jan 28 18:38:57 EST 2019

@pshipton
Copy link
Member

pshipton commented Apr 7, 2022

Although the test does hard code the value to validate, including the seconds.

        pathValidator.validate(new String[]{REVOKED, INT},
                ValidatePathWithParams.Status.REVOKED,
                "Mon Jan 28 15:38:57 PST 2019", System.out);

@JasonFengJ9
Copy link
Member Author

15x grinder - job/Grinder/22419/

@pshipton
Copy link
Member

pshipton commented Apr 7, 2022

The grinder passed. @knn-k fyi, not sure if this is an issue with amac, or a test problem.

@JasonFengJ9
Copy link
Member Author

JasonFengJ9 commented Apr 18, 2022 •
edited
Loading

JDK18 - job/Test_openjdk18_j9_extended.openjdk_aarch64_linux/19/ (ub18-aarch64-8)

[2022-04-16T19:33:56.175Z] certpath: Verified signature of OCSP Response
[2022-04-16T19:33:56.175Z] certpath: OCSP response validity interval is from Sat Apr 16 11:38:13 EDT 2022 until Sat Apr 23 12:38:13 EDT 2022
[2022-04-16T19:33:56.175Z] certpath: Checking validity of OCSP response on Sat Apr 16 15:33:54 EDT 2022 with allowed interval between Sat Apr 16 15:18:54 EDT 2022 and Sat Apr 16 15:48:54 EDT 2022
[2022-04-16T19:33:56.175Z] java.lang.RuntimeException: TEST FAILED: unexpected revocation date
[2022-04-16T19:33:56.175Z] 	at ValidatePathWithParams.validate(ValidatePathWithParams.java:206)
[2022-04-16T19:33:56.175Z] 	at AmazonCA_3.runTest(AmazonCA.java:444)
[2022-04-16T19:33:56.175Z] 	at AmazonCA.main(AmazonCA.java:66)
[2022-04-16T19:33:56.175Z] 	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
[2022-04-16T19:33:56.175Z] 	at java.base/java.lang.reflect.Method.invoke(Method.java:577)
[2022-04-16T19:33:56.175Z] 	at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
[2022-04-16T19:33:56.175Z] 	at java.base/java.lang.Thread.run(Thread.java:852)
[2022-04-16T19:33:56.175Z] 
[2022-04-16T19:33:56.175Z] JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: unexpected revocation date

job/Test_openjdk18_j9_extended.openjdk_s390x_linux/15/ (rhel7s390x-3-6)

[2022-04-16T21:26:11.152Z] certpath: Verified signature of OCSP Response
[2022-04-16T21:26:11.152Z] certpath: OCSP response validity interval is from Sat Apr 16 08:38:13 PDT 2022 until Sat Apr 23 09:38:13 PDT 2022
[2022-04-16T21:26:11.152Z] certpath: Checking validity of OCSP response on Sat Apr 16 14:26:09 PDT 2022 with allowed interval between Sat Apr 16 14:11:09 PDT 2022 and Sat Apr 16 14:41:09 PDT 2022
[2022-04-16T21:26:11.152Z] certpath: X509CertSelector.match(SN: 3e8
[2022-04-16T21:26:11.152Z]   Issuer: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
[2022-04-16T21:26:11.152Z]   Subject: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK)
[2022-04-16T21:26:11.152Z] certpath: X509CertSelector.match: subject DNs don't match
[2022-04-16T21:26:11.152Z] java.lang.RuntimeException: TEST FAILED: unexpected revocation date
[2022-04-16T21:26:11.152Z] 	at ValidatePathWithParams.validate(ValidatePathWithParams.java:206)
[2022-04-16T21:26:11.152Z] 	at AmazonCA_3.runTest(AmazonCA.java:444)
[2022-04-16T21:26:11.152Z] 	at AmazonCA.main(AmazonCA.java:66)
[2022-04-16T21:26:11.152Z] 	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
[2022-04-16T21:26:11.152Z] 	at java.base/java.lang.reflect.Method.invoke(Method.java:577)
[2022-04-16T21:26:11.152Z] 	at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:127)
[2022-04-16T21:26:11.152Z] 	at java.base/java.lang.Thread.run(Thread.java:852)
[2022-04-16T21:26:11.152Z] 
[2022-04-16T21:26:11.152Z] JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: unexpected revocation date

@JasonFengJ9 JasonFengJ9 changed the title JDK11 aarch64_mac security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java TEST FAILED: unexpected revocation date security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java TEST FAILED: unexpected revocation date Apr 18, 2022
@JasonFengJ9
Copy link
Member Author

JDK21 aarch64_mac(macaarch64rt8)

05:08:00  variation: Mode650
05:08:00  JVM_OPTIONS:  -XX:-UseCompressedOops 

05:08:14  TEST: security/infra/java/security/cert/CertPathValidator/certification/MicrosoftTLS.java

05:08:14  certpath: X509CertSelector.match: subject DNs don't match
05:08:14  java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
05:08:14  	at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)
05:08:14  	at MicrosoftRSATLS.runTest(MicrosoftTLS.java:340)
05:08:14  	at MicrosoftTLS.main(MicrosoftTLS.java:58)
05:08:14  	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
05:08:14  	at java.base/java.lang.reflect.Method.invoke(Method.java:580)
05:08:14  	at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
05:08:14  	at java.base/java.lang.Thread.run(Thread.java:1595)
05:08:14  Caused by: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
05:08:14  	at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
05:08:14  	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224)
05:08:14  	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144)
05:08:14  	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83)
05:08:14  	at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)
05:08:14  	at ValidatePathWithParams.doCertPathValidate(ValidatePathWithParams.java:288)
05:08:14  	at ValidatePathWithParams.validate(ValidatePathWithParams.java:142)
05:08:14  	... 6 more
05:08:14  Caused by: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
05:08:14  	at java.base/sun.security.provider.certpath.OCSPResponse.verify(OCSPResponse.java:618)
05:08:14  	at java.base/sun.security.provider.certpath.OCSP.check(OCSP.java:141)
05:08:14  	at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:780)
05:08:14  	at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:369)
05:08:14  	at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:343)
05:08:14  	at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
05:08:14  	... 12 more
05:08:14  
05:08:14  JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status

05:08:14  TEST RESULT: Failed. Execution failed: `main' threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status
05:08:14  --------------------------------------------------
05:08:21  Test results: passed: 13; failed: 1
05:08:28  Report written to /Users/jenkins/workspace/Test_openjdk21_j9_extended.openjdk_aarch64_mac_Personal/aqa-tests/TKG/output_16940760415813/jdk_security_infra_1/report/html/report.html
05:08:28  Results written to /Users/jenkins/workspace/Test_openjdk21_j9_extended.openjdk_aarch64_mac_Personal/aqa-tests/TKG/output_16940760415813/jdk_security_infra_1/work
05:08:28  Error: Some tests failed or other problems occurred.
05:08:28  -----------------------------------
05:08:28  jdk_security_infra_1_FAILED

@pshipton
Copy link
Member

pshipton commented Sep 7, 2023

@JasonFengJ9 pls create a new issue for the previous comment, it doesn't match the description of this issue.

@JasonFengJ9
Copy link
Member Author

Created

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
test failure triageRequired
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@AdamBrousseau @JasonFengJ9 @pshipton