[jbossws-issues] [JBoss JIRA] (JBWS-4108) Expired certificates in testsuite

Jan Blizňák (JIRA) issues at jboss.org
Thu Mar 22 08:10:00 EDT 2018


Jan Blizňák created JBWS-4108:
---------------------------------

             Summary: Expired certificates in testsuite
                 Key: JBWS-4108
                 URL: https://issues.jboss.org/browse/JBWS-4108
             Project: JBoss Web Services
          Issue Type: Bug
          Components: jbossws-cxf
            Reporter: Jan Blizňák


Starting with Tuesday 20th of March 2018 we are getting test failures in few tests, rootcause of this is using pregenerated jks stores

{code:java}
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Mon Mar 19 19:59:59 EDT 2018
	at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:274)
	at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:629)
	at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:602)
	at org.apache.wss4j.common.crypto.Merlin.verifyTrust(Merlin.java:758)
	... 64 more
{code}

Some already expired stores:
./modules/testsuite/cxf-tests/src/test/resources/jaxws/samples/wsse/policy/oasis/META-INF/alice.jks
Valid from: Sat Mar 19 01:00:00 CET 2005 until: Tue Mar 20 00:59:59 CET 2018

./modules/testsuite/cxf-tests/src/test/resources/jaxws/samples/wsse/policy/oasis/WEB-INF/bob.jks
Valid from: Sat Mar 19 01:00:00 CET 2005 until: Tue Mar 20 00:59:59 CET 2018


./modules/testsuite/cxf-tests/src/test/resources/jaxws/samples/wsse/policy/secconv/META-INF/alice.jks
Valid from: Sat Mar 19 01:00:00 CET 2005 until: Tue Mar 20 00:59:59 CET 2018

and soon to be invalid too:
./modules/testsuite/cxf-tests/src/test/resources/jaxws/samples/wsse/policy/basic/sign-encrypt/META-INF/john.jks
Valid from: Tue May 20 12:48:17 CEST 2008 until: Fri May 18 12:48:17 CEST 2018

./modules/testsuite/cxf-tests/src/test/resources/jaxws/samples/wsse/policy/basic/sign-encrypt/WEB-INF/bob2.jks
Valid from: Tue May 20 12:48:17 CEST 2008 until: Fri May 18 12:48:17 CEST 2018

... etc.

We should probably switch to generating all the *-stores in pre test phase like done in wildfly https://github.com/wildfly/wildfly/blob/master/testsuite/integration/basic/pom.xml#L76 to be safe all the time



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)



More information about the jbossws-issues mailing list