Skip to content

Regenerate expired certificates in subjalt.jks#2965

Merged
coheigea merged 1 commit intomainfrom
fix-expired-subjalt-certs
Apr 22, 2026
Merged

Regenerate expired certificates in subjalt.jks#2965
coheigea merged 1 commit intomainfrom
fix-expired-subjalt-certs

Conversation

@gnodet
Copy link
Copy Markdown
Contributor

@gnodet gnodet commented Mar 12, 2026

Summary

  • Four of the five certificates in testutils/src/test/resources/keys/subjalt.jks expired on December 15, 2024
  • This causes HostnameVerificationTest and HostnameVerificationDeprecatedTest to fail with SSL handshake errors
  • Regenerated the four expired certificates (subjaltmatch, subjaltnomatch, nosubjaltcnmatch, nosubjaltcnnomatch) with identical DN/SAN values and 10-year validity (until 2036)
  • The fifth certificate (nosubjaltcnmatchwildcard) remains valid until 2028 and was not changed

Test plan

  • CI passes: HostnameVerificationTest and HostnameVerificationDeprecatedTest should now succeed
  • Verify no other tests are affected by the certificate regeneration

🤖 Generated with Claude Code

…onTest

Four of the five certificates in subjalt.jks (subjaltmatch, subjaltnomatch,
nosubjaltcnmatch, nosubjaltcnnomatch) expired on December 15, 2024, causing
HostnameVerificationTest and HostnameVerificationDeprecatedTest to fail.

Regenerated all four certificates with the same DN and SAN values,
using 10-year validity (until 2036). The fifth certificate
(nosubjaltcnmatchwildcard) remains valid until 2028 and was not changed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@gnodet gnodet added the bug label Mar 12, 2026
@gnodet gnodet marked this pull request as ready for review March 12, 2026 18:01
@coheigea coheigea merged commit 69bdc52 into main Apr 22, 2026
4 checks passed
@coheigea coheigea deleted the fix-expired-subjalt-certs branch April 22, 2026 09:29
coheigea pushed a commit that referenced this pull request Apr 22, 2026
…onTest (#2965)

Four of the five certificates in subjalt.jks (subjaltmatch, subjaltnomatch,
nosubjaltcnmatch, nosubjaltcnnomatch) expired on December 15, 2024, causing
HostnameVerificationTest and HostnameVerificationDeprecatedTest to fail.

Regenerated all four certificates with the same DN and SAN values,
using 10-year validity (until 2036). The fifth certificate
(nosubjaltcnmatchwildcard) remains valid until 2028 and was not changed.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit 69bdc52)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants