May I request you to review this small update to add keynectisrootca to expiry check exempt list. JDK-8225068 will remove this certificate after expiry.
diff -r af8e77a59bd8 test/jdk/sun/security/lib/cacerts/VerifyCACerts.java --- a/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java Fri Feb 14 12:47:18 2020 -0800 +++ b/test/jdk/sun/security/lib/cacerts/VerifyCACerts.java Fri Feb 14 13:13:14 2020 -0800 @@ -1,5 +1,5 @@ /* - * Copyright (c) 2017, 2019, Oracle and/or its affiliates. All rights reserved. + * Copyright (c) 2017, 2020, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it @@ -259,6 +259,8 @@ { // Valid until: Tue Jul 09 14:40:36 EDT 2019 add("utnuserfirstobjectca [jdk]"); + // Valid until: Tue May 26 00:00:00 GMT 2020 + add("keynectisrootca [jdk]"); } }; Thanks, Rajan