Skip to content

Commit 6631a98

Browse files
[TEST] Updated smoke test JDK's trusted certs (#72594)
The list of trusted CAs in the latest OpenJDK builds has changed: https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8243559 This PR updates the default jdk trust config smoke test. Closes #71717
1 parent 58b0970 commit 6631a98

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

libs/ssl-config/src/test/java/org/elasticsearch/common/ssl/DefaultJdkTrustConfigTests.java

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -55,11 +55,12 @@ private void assertStandardIssuers(X509ExtendedTrustManager trustManager) {
5555
assertThat(trustManager.getAcceptedIssuers(), not(emptyArray()));
5656
// This is a sample of the CAs that we expect on every JRE.
5757
// We can safely change this list if the JRE's issuer list changes, but we want to assert something useful.
58-
assertHasTrustedIssuer(trustManager, "VeriSign");
59-
assertHasTrustedIssuer(trustManager, "GeoTrust");
6058
assertHasTrustedIssuer(trustManager, "DigiCert");
61-
assertHasTrustedIssuer(trustManager, "thawte");
6259
assertHasTrustedIssuer(trustManager, "COMODO");
60+
assertHasTrustedIssuer(trustManager, "GlobalSign");
61+
assertHasTrustedIssuer(trustManager, "GoDaddy");
62+
assertHasTrustedIssuer(trustManager, "QuoVadis");
63+
assertHasTrustedIssuer(trustManager, "Internet Security Research Group");
6364
}
6465

6566
private void assertHasTrustedIssuer(X509ExtendedTrustManager trustManager, String name) {

0 commit comments

Comments
 (0)