Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 903678 Details for
Bug 1106031
canl-java: FTBFS in rawhide
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
build.log
<fdopen> (text/plain), 191.04 KB, created by
Dennis Gilmore
on 2014-06-09 02:21:55 UTC
(
hide
)
Description:
build.log
Filename:
MIME Type:
Creator:
Dennis Gilmore
Created:
2014-06-09 02:21:55 UTC
Size:
191.04 KB
patch
obsolete
>Mock Version: 1.1.39 >Mock Version: 1.1.39 >ENTER do(['bash', '--login', '-c', 'rpmbuild -bs --target noarch --nodeps builddir/build/SPECS/canl-java.spec'], False, '/var/lib/mock/f21-build-2115660-392818/root/', None, 86400, True, False, 1000, 425, None, False, {'LANG': 'en_US.UTF-8', 'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOSTNAME': 'mock', 'PROMPT_COMMAND': 'echo -n "<mock-chroot>"', 'HOME': '/builddir', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin'}, logger=<mockbuild.trace_decorator.getLog object at 0x1f2db90>) >Executing command: ['bash', '--login', '-c', 'rpmbuild -bs --target noarch --nodeps builddir/build/SPECS/canl-java.spec'] with env {'LANG': 'en_US.UTF-8', 'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOSTNAME': 'mock', 'PROMPT_COMMAND': 'echo -n "<mock-chroot>"', 'HOME': '/builddir', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin'} >warning: Could not canonicalize hostname: buildhw-07.phx2.fedoraproject.org >Building target platforms: noarch >Building for target noarch >Wrote: /builddir/build/SRPMS/canl-java-2.1.0-2.fc21.src.rpm >Child return code was: 0 >LEAVE do --> > >ENTER do(['bash', '--login', '-c', 'rpmbuild -bb --target noarch --nodeps builddir/build/SPECS/canl-java.spec'], False, '/var/lib/mock/f21-build-2115660-392818/root/', None, 86400, True, False, 1000, 425, None, False, {'LANG': 'en_US.UTF-8', 'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOSTNAME': 'mock', 'PROMPT_COMMAND': 'echo -n "<mock-chroot>"', 'HOME': '/builddir', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin'}, logger=<mockbuild.trace_decorator.getLog object at 0x1f2db90>) >Executing command: ['bash', '--login', '-c', 'rpmbuild -bb --target noarch --nodeps builddir/build/SPECS/canl-java.spec'] with env {'LANG': 'en_US.UTF-8', 'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOSTNAME': 'mock', 'PROMPT_COMMAND': 'echo -n "<mock-chroot>"', 'HOME': '/builddir', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin'} >Building target platforms: noarch >Building for target noarch >Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.Q6yRDV >+ umask 022 >+ cd /builddir/build/BUILD >+ cd /builddir/build/BUILD >+ rm -rf canl-java-canl-2.1.0 >+ /usr/bin/gzip -dc /builddir/build/SOURCES/canl-2.1.0.tar.gz >+ /usr/bin/tar -xf - >+ STATUS=0 >+ '[' 0 -ne 0 ']' >+ cd canl-java-canl-2.1.0 >+ /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . >Patch #0 (canl-java-test.patch): >+ echo 'Patch #0 (canl-java-test.patch):' >+ /usr/bin/patch -p1 --fuzz=0 >+ /usr/bin/cat /builddir/build/SOURCES/canl-java-test.patch >patching file src/test/java/eu/emi/security/authn/x509/impl/CRLTest.java >+ python /usr/share/java-utils/pom_editor.py pom_xpath_remove pom:build/pom:extensions >+ python /usr/share/java-utils/pom_editor.py pom_remove_plugin org.apache.maven.plugins:maven-gpg-plugin >+ exit 0 >Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.usOFcx >+ umask 022 >+ cd /builddir/build/BUILD >+ cd canl-java-canl-2.1.0 >+ python /usr/share/java-utils/mvn_build.py >Executing: xmvn --batch-mode --offline verify org.fedoraproject.xmvn:xmvn-mojo:install org.apache.maven.plugins:maven-javadoc-plugin:aggregate org.fedoraproject.xmvn:xmvn-mojo:builddep >['xmvn', '--batch-mode', '--offline', 'verify', 'org.fedoraproject.xmvn:xmvn-mojo:install', 'org.apache.maven.plugins:maven-javadoc-plugin:aggregate', 'org.fedoraproject.xmvn:xmvn-mojo:builddep'] >[INFO] Scanning for projects... >[INFO] >[INFO] Using the builder org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder with a thread count of 1 >[INFO] >[INFO] ------------------------------------------------------------------------ >[INFO] Building canl 2.1.0 >[INFO] ------------------------------------------------------------------------ >[INFO] >[INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ canl --- >[INFO] Using 'UTF-8' encoding to copy filtered resources. >[INFO] Copying 1 resource >[INFO] >[INFO] --- maven-compiler-plugin:3.1:compile (default-compile) @ canl --- >[INFO] Changes detected - recompiling the module! >[INFO] Compiling 150 source files to /builddir/build/BUILD/canl-java-canl-2.1.0/target/classes >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/main/java/eu/emi/security/authn/x509/helpers/ocsp/OCSPVerifier.java: Some input files use or override a deprecated API. >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/main/java/eu/emi/security/authn/x509/helpers/ocsp/OCSPVerifier.java: Recompile with -Xlint:deprecation for details. >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/main/java/eu/emi/security/authn/x509/helpers/pkipath/bc/CertPathValidatorUtilities.java: Some input files use unchecked or unsafe operations. >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/main/java/eu/emi/security/authn/x509/helpers/pkipath/bc/CertPathValidatorUtilities.java: Recompile with -Xlint:unchecked for details. >[INFO] >[INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ canl --- >[INFO] Using 'UTF-8' encoding to copy filtered resources. >[INFO] Copying 2207 resources >[INFO] >[INFO] --- maven-compiler-plugin:3.1:testCompile (default-testCompile) @ canl --- >[INFO] Changes detected - recompiling the module! >[INFO] Compiling 34 source files to /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-classes >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/java/eu/emi/security/authn/x509/proxy/ProxyGenerationTest.java: Some input files use or override a deprecated API. >[WARNING] /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/java/eu/emi/security/authn/x509/proxy/ProxyGenerationTest.java: Recompile with -Xlint:deprecation for details. >[INFO] >[INFO] --- maven-surefire-plugin:2.17:test (default-test) @ canl --- >[INFO] Surefire report directory: /builddir/build/BUILD/canl-java-canl-2.1.0/target/surefire-reports >------------------------------------------------------- > T E S T S >------------------------------------------------------- >Running eu.emi.security.authn.x509.impl.NISTValidator01_5Test >Result (short): FAILED: Trusted CA certificate was found for the certificate chain but the initial certificate in chain is not issued (correctly signed) by this CA certificate >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Trusted CA certificate was found for the certificate chain but the initial certificate in chain is not issued (correctly signed) by this CA certificate >error at position 1 in chain, problematic certificate subject: CN=Bad Signed CA,O=Test Certificates 2011,C=US (category: X509_BASIC): Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (short): FAILED: Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid EE Signature Test3,O=Test Certificates 2011,C=US (category: X509_BASIC): Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (short): FAILED: Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DSA Signature EE Certificate Test6,O=Test Certificates 2011,C=US (category: X509_BASIC): Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (short): FAILED: Certificate is not yet valid. Will be from: Tue Jan 01 12:01:00 UTC 2047 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=Bad notBefore Date CA,O=Test Certificates 2011,C=US (category: X509_BASIC): Certificate is not yet valid. Will be from: Tue Jan 01 12:01:00 UTC 2047 >Result (short): FAILED: Certificate is not yet valid. Will be from: Tue Jan 01 12:01:00 UTC 2047 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid EE notBefore Date EE Certificate Test2,O=Test Certificates 2011,C=US (category: X509_BASIC): Certificate is not yet valid. Will be from: Tue Jan 01 12:01:00 UTC 2047 >Result (short): FAILED: Certificate has expired on: Sat Jan 01 08:30:00 UTC 2011 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=Bad notAfter Date CA,O=Test Certificates 2011,C=US (category: X509_BASIC): Certificate has expired on: Sat Jan 01 08:30:00 UTC 2011 >Result (short): FAILED: Certificate has expired on: Sat Jan 01 08:30:00 UTC 2011 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid EE notAfter Date EE Certificate Test6,O=Test Certificates 2011,C=US (category: X509_BASIC): Certificate has expired on: Sat Jan 01 08:30:00 UTC 2011 >Result (short): FAILED: Certificate has expired on: Fri Jan 01 12:01:00 UTC 1999 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid pre2000 UTC EE notAfter Date EE Certificate Test7,O=Test Certificates 2011,C=US (category: X509_BASIC): Certificate has expired on: Fri Jan 01 12:01:00 UTC 1999 >error at position 0 in chain, problematic certificate subject: CN=Invalid pre2000 UTC EE notAfter Date EE Certificate Test7,O=Test Certificates 2011,C=US (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=Good CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Good CA Root, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Name Chaining EE Certificate Test1,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Good CA Root, O=Test Certificates 2011, C=US" >error at position 0 in chain, problematic certificate subject: CN=Invalid Name Chaining EE Certificate Test1,O=Test Certificates 2011,C=US (category: X509_CHAIN): Certificate chain is inconsistent, expected issuer "CN=Good CA,O=Test Certificates 2011,C=US" while found "CN=Good CA Root,O=Test Certificates 2011,C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Name Ordering CA, OU=Organizational Unit Name 1, OU=Organizational Unit Name 2, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Name Chaining Order EE Certificate Test2,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Name Ordering CA, OU=Organizational Unit Name 1, OU=Organizational Unit Name 2, O=Test Certificates 2011, C=US" >error at position 0 in chain, problematic certificate subject: CN=Invalid Name Chaining Order EE Certificate Test2,O=Test Certificates 2011,C=US (category: X509_CHAIN): Certificate chain is inconsistent, expected issuer "CN=Name Ordering CA,OU=Organizational Unit Name 2,OU=Organizational Unit Name 1,O=Test Certificates 2011,C=US" while found "CN=Name Ordering CA,OU=Organizational Unit Name 1,OU=Organizational Unit Name 2,O=Test Certificates 2011,C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=No CRL CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Missing CRL EE Certificate Test1,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=No CRL CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=Revoked subCA,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Revoked EE Certificate Test3,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Signature of a CRL corresponding to this certificate's CA is invalid Cause: Cannot verify CRL. Cause: CRL does not verify with supplied public key. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Bad CRL Signature EE Certificate Test4,O=Test Certificates 2011,C=US (category: CRL): Signature of a CRL corresponding to this certificate's CA is invalid Cause: Cannot verify CRL. Cause: CRL does not verify with supplied public key. >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Bad CRL Issuer Name CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Bad CRL Issuer Name EE Certificate Test5,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Bad CRL Issuer Name CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Wrong CRL CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Wrong CRL EE Certificate Test6,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Wrong CRL CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Unknown CRL Entry Extension EE Certificate Test8,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: CRL contains unknown critical extensions, the first one is 2.16.840.1.101.2.1.12.2 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Unknown CRL Extension EE Certificate Test9,O=Test Certificates 2011,C=US (category: CRL): CRL contains unknown critical extensions, the first one is 2.16.840.1.101.2.1.12.2 >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Basic Self-Issued Old With New EE Certificate Test2,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Basic Self-Issued New With Old EE Certificate Test5,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Basic Self-Issued CRL Signing Key EE Certificate Test7,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Basic Self-Issued CRL Signing Key EE Certificate Test8,O=Test Certificates 2011,C=US (category: X509_BASIC): Signature of a certificate is invalid: java.security.SignatureException: certificate does not verify with supplied key >Result (short): FAILED: CRL contains unknown critical extensions, the first one is 2.16.840.1.101.2.1.12.2 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Unknown CRL Extension EE Certificate Test10,O=Test Certificates 2011,C=US (category: CRL): CRL contains unknown critical extensions, the first one is 2.16.840.1.101.2.1.12.2 >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Old CRL nextUpdate CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Old CRL nextUpdate EE Certificate Test11,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=Old CRL nextUpdate CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=pre2000 CRL nextUpdate CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid pre2000 CRL nextUpdate EE Certificate Test12,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=pre2000 CRL nextUpdate CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Negative Serial Number EE Certificate Test15,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Long Serial Number EE Certificate Test18,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Separate Certificate and CRL Keys EE Certificate Test20,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Can not verify the CRL as its issuer's public key is unknown or can not be validated Cause: Certification path could not be validated. Cause: Certificate revocation after Fri Jan 01 08:30:00 UTC 2010, reason: keyCompromise Cause: Certificate revocation after Fri Jan 01 08:30:00 UTC 2010, reason: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Separate Certificate and CRL Keys EE Certificate Test21,O=Test Certificates 2011,C=US (category: CRL): Can not verify the CRL as its issuer's public key is unknown or can not be validated Cause: Certification path could not be validated. Cause: Certificate revocation after Fri Jan 01 08:30:00 UTC 2010, reason: keyCompromise Cause: Certificate revocation after Fri Jan 01 08:30:00 UTC 2010, reason: keyCompromise >Tests run: 54, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.579 sec - in eu.emi.security.authn.x509.impl.NISTValidator01_5Test >Running eu.emi.security.authn.x509.impl.CertificateUtilsTest >-----BEGIN PRIVATE KEY----- >MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDE6zv5Nuq5B3X7 >CVUQFB9Sy1pJCNFObt2MMcXJNBzreH+DiDsSGNiZtlB8vYGB1H5bASQdNPrX0kIv >Pz2NCAytjhZ/AUmvua02lciLjbpwh2lH4IElK85HH0bcgEcZW28+wh+6xBdFVhh2 >HykIj6lSv51bkBVMvBKbla543SaJEK6xYINXpTN+dd+2p/K5SygSz8Ef8lnpY9ki >968+bLGAN6VwJ0wBC45XWWs5bJ0YGk4g1362wZ3Tii+VdgrrPnPe4U6+bab/SxLD >iiye5kMC1Oh/lA65ZVur2M5OlKSC+/SJ9Ut1uzaTAP2zfgsuEhNH+1pXld1tB/yK >bkGBh691AgMBAAECggEAUvHW2Dl2kyt+WZhruRMQwpofVIYfS89NCKFqcz69M74U >z/2RDCVlDxIJQxG7vEkaVBDd+mN3iXLqJ+aWcZJDbNNdzG9pb1hhio165LV1I7MV >+I2rOFIEWFbnTTfHOvoVmLTCErRILQ9/zDmB2jZRFybZDFlbb3AE0n4w+H4GnlKo >HIjTVyeuEU1J4OyYTc9ejaYpMP3Pqg9gOKmbAeqeYGroNCxuHvfyhPtw3gttF6xz >hnXaFpJjUwIyz6NUQ64v/2wqGo4INk5+c1+MfMe6OKK4CEkKL2gzK/pIUevNRMCd >GLE3Q4ZrBtKB7zubnCEmhXejPoAGi0DDMR5WnSBh4QKBgQDt2DLYrrVVEoQWo9H4 >5/SA+FDM91G8FJ7OTWtWHw9n/tF3ay3pAW6QLWfLGzMkVlD65fq3hi/s588H+9E8 >SL5vQ/LUkwmFa4LaB4xKGXhu/3p5Q+oVRIc4dwc/qfj9W6oN7SfARz0CZuZ35Q6R >afzD7sydnxipmFFN3tlc2f0UjQKBgQDT80stOWlXvXmy6FIl+anaVMY99Q5yrDAM >eaqL2p8/hHKSqnwm9Pwnoutd+6GFaiUkWi93Z4CCB4dag6LS0S36CW0MgGR3mMiK >B1clNIhek7xbv7+T59IarEJn56o1+1FAyXZJuvlCrJElBPWtM0IkZW5/FiQ4mFIP >CL/XkwJwiQKBgCxNG9NuX0o0Q7Qv2VliYxFuryYuXuQIdzf4Bakp6eW1+fAjX47J >/H0QaAfVziXTigvhsFxkuyKGXvKeve9boVT6NA3SQXC/gMT5qPDYY61RGs/hjYVe >mU00Jn5+O2l9nGQxqzjOTBfZcM4eNSNyuWkJXsVxL9fPDj3R52y7Eb+1AoGARPnY >bU9RyQwQnvicQ1+Mt1D/cwpdOVRwDp9JsVnkmXcxEioJXWQ862lJz7wkRJbWn436 >BJHacHaixgIw6wrIO6b1pivihkliegkJg0IlXyIVGoa8ghXfem607bum2QqA1uS5 >aiU/GUOvuKx0h3k2/UFFRHagMwrfKaVfSXi+QoECgYAdQAiiCKsAAMi/7FYS8ORc >e60vojIDcDKFMYEXbEyasa4zfB+IEh3JGhh/7qWvjUFDdJ+d7UovnhwBMMOcd7XX >gWgNEF9uBUdFkFB5atTgL8mCazZ3+S0j9hMohH8HEuMqT+ZPZXMtekriIU1jtYFV >4nxOYwcFJPob24b4ZIF3rg== >-----END PRIVATE KEY----- >-----BEGIN CERTIFICATE----- >MIIDzjCCAragAwIBAgIJAKf7A/BpqXqDMA0GCSqGSIb3DQEBBQUAMEYxCzAJBgNV >BAYTAkVVMR0wGwYDVQQKDBRUZXN0aW5nIE9yZ2FuaXphdGlvbjEYMBYGA1UEAwwP >VU5JQ09SRSBURVNUIENBMB4XDTEwMTIxMDIyMjM0N1oXDTMwMTIwNTIyMjM0N1ow >XDELMAkGA1UEBhMCRVUxFTATBgNVBAcMDFRlc3RpbmcgQ2l0eTEdMBsGA1UECgwU >VGVzdGluZyBPcmdhbml6YXRpb24xFzAVBgNVBAMMDlBEUFRlc3QgU2VydmVyMIIB >IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOs7+TbquQd1+wlVEBQfUsta >SQjRTm7djDHFyTQc63h/g4g7EhjYmbZQfL2BgdR+WwEkHTT619JCLz89jQgMrY4W >fwFJr7mtNpXIi426cIdpR+CBJSvORx9G3IBHGVtvPsIfusQXRVYYdh8pCI+pUr+d >W5AVTLwSm5WueN0miRCusWCDV6UzfnXftqfyuUsoEs/BH/JZ6WPZIvevPmyxgDel >cCdMAQuOV1lrOWydGBpOINd+tsGd04ovlXYK6z5z3uFOvm2m/0sSw4osnuZDAtTo >f5QOuWVbq9jOTpSkgvv0ifVLdbs2kwD9s34LLhITR/taV5XdbQf8im5BgYevdQID >AQABo4GoMIGlMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgTwMAsGA1UdDwQE >AwIE8DA4BglghkgBhvhCAQ0EKxYpQ2VydGlmaWNhdGUgZ2VuZXJhdGVkIGZvciBV >TklDT1JFIFRFU1RJTkcwHQYDVR0OBBYEFBSs0bvfk4QbcwBDST5ekodEkp2wMB8G >A1UdIwQYMBaAFGLAoCwsVkCcRZ8AKC5zrFz+R/S8MA0GCSqGSIb3DQEBBQUAA4IB >AQA/lfTnE5dEN61Amh7ZfUnFFo5+qMJYI9uezeyoNnXVTE1xXL5J7cPWMD+6Csjx >W/mwrN1Ha1zmyn56IGcMNVAJC4drkXn15+lfqRhCj7+5JN7ODDgZz8BT734eFxPm >heYP6ZI/DKWf4gGfvw0p8aAV0HgCkrdeYUXcZ9KZoklilvgfW5ewWF7fxukd0LxP >wdArqN6njvR0Jy2/x/6KSO8SHTzPpQPgnTiAxzIxP9OQ3PA4DipYtEwy9LImZApt >jqoplTPI+ljhxJERbRNOU+W5pBamoWeyxeXfSDywobxl3ZEPiz9B6HCLh/aoNbIa >HH0YVE9byTfxuKfjiFldgVVe >-----END CERTIFICATE----- >-----BEGIN CERTIFICATE----- >MIIDfzCCAmegAwIBAgIJAKf7A/BpqXqCMA0GCSqGSIb3DQEBBQUAMEYxCzAJBgNV >BAYTAkVVMR0wGwYDVQQKDBRUZXN0aW5nIE9yZ2FuaXphdGlvbjEYMBYGA1UEAwwP >VU5JQ09SRSBURVNUIENBMB4XDTEwMTIxMDIyMjAwNloXDTEzMTIwOTIyMjAwNlow >RjELMAkGA1UEBhMCRVUxHTAbBgNVBAoMFFRlc3RpbmcgT3JnYW5pemF0aW9uMRgw >FgYDVQQDDA9VTklDT1JFIFRFU1QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw >ggEKAoIBAQDfshnTiMvByC2zwn0c4RINPKM5vEs1b8NuDYtia29IxSruAG2kwGTG >PI3TFpxPZ6X+m9Xr8ImFnx5zzKdWlM62jvaaEUzsBIWV5VnrAszXF9oeyFnLi2uu >wmAyZW/Nj8IBPuwUOmteJ1up1CaKoFl9FNpwSvi8CXZgTEzAr6QbhDDloeB9EkQL >loiEnhEJrahIYF+WIZ5j2TA2fcANCIgkN/iwKHMAXcrnlBwlJ/qZ+PkbuCebnW3W >sWkCJTFatoR6UnXq+5XUVqY7XYcIY1A/ouAOnC+r+/wPmqT2VfgLpPBfpvyqZ5fc >bqOhK2fajV00E66DROjEZZq7aQlLIA1RAgMBAAGjcDBuMB0GA1UdDgQWBBRiwKAs >LFZAnEWfACguc6xc/kf0vDAfBgNVHSMEGDAWgBRiwKAsLFZAnEWfACguc6xc/kf0 >vDAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIBxjARBglghkgBhvhCAQEEBAMCAQYw >DQYJKoZIhvcNAQEFBQADggEBAKD8/2aeVc+vYQRuNviec5mLTzfPGzE6PmLWKeum >bu5dsnBHdNM/thSl5Y8co3smHPbTOZx07I5znKdnRWv7xn23ouQCMktoQXHZ6n5I >YlT87/vkNXYAwJUytsfamHoBdbOvC8bLzP228ZmE7XLZK5fXE3OuAwVpKzOnwo/U >wW4YxJt3Qs7usfizip5JYcgxKRr/o3aKpiqtaPeoWJOtQ0FZyBaOtPgnKn7DUGUZ >NaaFYOQ/ouf8qiSOdBGir3XjeTV71ezcdF1NN8wUBTTFJAW5Y0LeNrGbq5jjLnuj >rB0AbLImY4pZC+DJwpOfUgwhC8AcjcjbB9yid6XsMnCnOqQ= >-----END CERTIFICATE----- >-------------------COMPACT >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >------------------- >X.509 v3 certificate, Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU, Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >-------------------MEDIUM >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Valid from: Fri Dec 10 22:20:06 UTC 2010 >Valid to: Mon Dec 09 22:20:06 UTC 2013 >------------------- >X.509 v3 certificate, Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU, Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU, Valid from: Fri Dec 10 22:20:06 UTC 2010, Valid to: Mon Dec 09 22:20:06 UTC 2013 >-------------------FULL >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Valid from: Fri Dec 10 22:20:06 UTC 2010 >Valid to: Mon Dec 09 22:20:06 UTC 2013 >CA: true >Signature alg: SHA1WITHRSA >Public key type: RSA 2048bit >Allowed usage: digitalSignature nonRepudiation keyCertSign CRLSign >Serial number: 12104272754588088962 >Certificate chain, 3 elements: >-----Certificate 1----- >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Valid from: Fri Dec 10 22:20:06 UTC 2010 >Valid to: Mon Dec 09 22:20:06 UTC 2013 >-----Certificate 2----- >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Valid from: Fri Dec 10 22:20:06 UTC 2010 >Valid to: Mon Dec 09 22:20:06 UTC 2013 >-----Certificate 3----- >X.509 v3 certificate >Subject: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Issuer: CN=UNICORE TEST CA,O=Testing Organization,C=EU >Valid from: Fri Dec 10 22:20:06 UTC 2010 >Valid to: Mon Dec 09 22:20:06 UTC 2013 >1024 >1.2.840.113549.1.1.5 >SHA1WITHRSA >Tests run: 11, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.419 sec - in eu.emi.security.authn.x509.impl.CertificateUtilsTest >Running eu.emi.security.authn.x509.impl.TestKSValidators >L1: error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >L1: error at position 0 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >L1: error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >L2: error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >L1: error at position 0 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >L2: error at position 0 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >L2: error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >L2: error at position 0 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Unknown location (certificate retrieved from keystore) java.lang.Exception: Trusted CA certificate with subject CN=the expired CA,OU=Relaxation,O=Utopia,L=Tropic,C=UG is EXPIRED: NotAfter: Wed Dec 15 17:23:13 UTC 2010 >target/test-tmp/truststores/work.jks null >Unknown location (certificate retrieved from keystore) java.lang.Exception: Trusted CA certificate with subject CN=the expired CA,OU=Relaxation,O=Utopia,L=Tropic,C=UG is EXPIRED: NotAfter: Wed Dec 15 17:23:13 UTC 2010 >target/test-tmp/truststores/work.jks null >target/test-tmp/truststores/work.jks java.io.FileNotFoundException: target/test-tmp/truststores/work.jks (No such file or directory) >target/test-tmp/truststores/work.jks java.io.FileNotFoundException: target/test-tmp/truststores/work.jks (No such file or directory) >FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=HTTPClient,O=Testing Organization,L=Testing City,C=EU (category: X509_CHAIN): Trusted issuer of this certificate was not established >Tests run: 9, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.615 sec - in eu.emi.security.authn.x509.impl.TestKSValidators >Running eu.emi.security.authn.x509.impl.HostnameCheckerTest >[^\.]*\Q\E[^\.]*\Q.aaa.\E[^\.]*\Qdd.ss\E[^\.]*\Q.\E[^\.]*\Q.dd\E[^\.]*\Qdd\E[^\.]*\Qdd\E[^\.]*\Q.[a-zA-Z]+.\E[^\.]* >false >Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.001 sec - in eu.emi.security.authn.x509.impl.HostnameCheckerTest >Running eu.emi.security.authn.x509.impl.CredentialsTest >Tests run: 11, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.49 sec - in eu.emi.security.authn.x509.impl.CredentialsTest >Running eu.emi.security.authn.x509.impl.V1CertValidationTest >Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.236 sec - in eu.emi.security.authn.x509.impl.V1CertValidationTest >Running eu.emi.security.authn.x509.impl.TestFlexibleValidator >file:/builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/truststores/wrong.pem java.io.IOException: PEM data not found in the stream and its end was reached >file:/builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/truststores/wrong.pem java.io.IOException: PEM data not found in the stream and its end was reached >Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.522 sec - in eu.emi.security.authn.x509.impl.TestFlexibleValidator >Running eu.emi.security.authn.x509.impl.TestSSLHelpers >Running func:cli-srv functional test >Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.267 sec - in eu.emi.security.authn.x509.impl.TestSSLHelpers >Running eu.emi.security.authn.x509.impl.OpensslValidatorStressTest >Loading: greedy: 3628ms lazy: 4ms; speedup: 907.0 >Validation: greedy: 1180ms lazy: 1046ms; speedup: 1.1281070745697896 >Memory usage stats are: 4045536 4340024 294488 >Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 9.517 sec - in eu.emi.security.authn.x509.impl.OpensslValidatorStressTest >Running eu.emi.security.authn.x509.impl.RolloverTest >Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.006 sec - in eu.emi.security.authn.x509.impl.RolloverTest >Running eu.emi.security.authn.x509.impl.OpensslValidatorTest >NOTIFICATION CA Certificate location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/36395d3c.0 cause: null >NOTIFICATION CRL location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/36395d3c.r0 cause: null >NOTIFICATION CRL location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/36395d3c.r0 cause: null >NOTIFICATION EUGridPMA namespace location: src/test/resources/glite-utiljava/grid-security/certificates-newhash/36395d3c.namespaces cause: null >NOTIFICATION EUGridPMA namespace location: src/test/resources/glite-utiljava/grid-security/certificates-newhash/36395d3c.namespaces cause: null >NOTIFICATION CA Certificate location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/7362bbd6.0 cause: null >NOTIFICATION CRL location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/7362bbd6.r0 cause: null >NOTIFICATION CRL location: /builddir/build/BUILD/canl-java-canl-2.1.0/src/test/resources/glite-utiljava/grid-security/certificates-newhash/7362bbd6.r0 cause: null >NOTIFICATION EUGridPMA namespace location: src/test/resources/glite-utiljava/grid-security/certificates-newhash/7362bbd6.namespaces cause: null >NOTIFICATION EUGridPMA namespace location: src/test/resources/glite-utiljava/grid-security/certificates-newhash/7362bbd6.namespaces cause: null >Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.027 sec - in eu.emi.security.authn.x509.impl.OpensslValidatorTest >Running eu.emi.security.authn.x509.impl.CRLIfValidTest >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=Revoked subCA,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Signature of a CRL corresponding to this certificate's CA is invalid Cause: Cannot verify CRL. Cause: CRL does not verify with supplied public key. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Bad CRL Signature EE Certificate Test4,O=Test Certificates 2011,C=US (category: CRL): Signature of a CRL corresponding to this certificate's CA is invalid Cause: Cannot verify CRL. Cause: CRL does not verify with supplied public key. >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Revoked EE Certificate Test3,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Revoked EE Certificate Test3,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:01 UTC 2010, the reason reported is: keyCompromise >Tests run: 7, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.06 sec - in eu.emi.security.authn.x509.impl.CRLIfValidTest >Running eu.emi.security.authn.x509.impl.NISTValidator13_16Test >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test10,OU=excludedSubtree1,OU=permittedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test10,OU=excludedSubtree1,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test10,OU=excludedSubtree1,OU=permittedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test12,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test12,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test12,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test13,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test13,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test13,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test15,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test15,OU=excludedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test15,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test16,OU=excludedSubtree2,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test16,OU=excludedSubtree2,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test16,OU=excludedSubtree2,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test17,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test17,OU=excludedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test17,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: Can not verify the CRL as its issuer's public key is unknown or can not be validated Cause: Certification path could not be validated. Cause: Subtree check for certificate subject failed. Cause: Subject distinguished name is not from a permitted subtree >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=nameConstraints DN1 CA,O=Test Certificates 2011,C=US (category: CRL): Can not verify the CRL as its issuer's public key is unknown or can not be validated Cause: Certification path could not be validated. Cause: Subtree check for certificate subject failed. Cause: Subject distinguished name is not from a permitted subtree >error at position 0 in chain, problematic certificate subject: CN=nameConstraints DN1 CA,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=nameConstraints DN1 CA,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (short): FAILED: The certificate contains the email address 1: Test22EE@testcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid RFC822 nameConstraints EE Certificate Test22,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 1: Test22EE@testcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 1: Test24EE@mailserver.testcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid RFC822 nameConstraints EE Certificate Test24,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 1: Test24EE@mailserver.testcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 1: Test26EE@testcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid RFC822 nameConstraints EE Certificate Test26,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 1: Test26EE@testcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 1: Test28EE@invalidcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN and RFC822 nameConstraints EE Certificate Test28,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 1: Test28EE@invalidcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate DN 1.2.840.113549.1.9.1=#1620546573743239454540696e76616c69646365727469666963617465732e676f76,CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: EMAILADDRESS=Test29EE@invalidcertificates.gov,CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN 1.2.840.113549.1.9.1=#1620546573743239454540696e76616c69646365727469666963617465732e676f76,CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (short): FAILED: The certificate contains the email address 2: testserver.invalidcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DNS nameConstraints EE Certificate Test31,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 2: testserver.invalidcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 2: invalidcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DNS nameConstraints EE Certificate Test33,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 2: invalidcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 6: http://testcertificates.gov/invalid.html which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid URI nameConstraints EE Certificate Test35,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 6: http://testcertificates.gov/invalid.html which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 6: ftp://invalidcertificates.gov:21/test37/ which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid URI nameConstraints EE Certificate Test37,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 6: ftp://invalidcertificates.gov:21/test37/ which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate contains the email address 2: mytestcertificates.gov which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DNS nameConstraints EE Certificate Test38,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 2: mytestcertificates.gov which is not in the permitted set of email addresses. >Result (short): FAILED: CRL checking failed: CRL for CA certificate only contains user certificates. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlyContainsUserCerts EE Certificate Test11,O=Test Certificates 2011,C=US (category: CRL): CRL checking failed: CRL for CA certificate only contains user certificates. >Result (short): FAILED: CRL checking failed: CRL for end certificate only contains CA certificates. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlyContainsCACerts EE Certificate Test12,O=Test Certificates 2011,C=US (category: CRL): CRL checking failed: CRL for end certificate only contains CA certificates. >Result (short): FAILED: CRL checking failed: CRL only contains attribute certificates. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlyContainsAttirubteCerts EE Certificate Test14,O=Test Certificates 2011,C=US (category: CRL): CRL checking failed: CRL only contains attribute certificates. >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlySomeReasons EE Certificate Test15,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: certificateHold >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlySomeReasons EE Certificate Test16,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: certificateHold >Result (short): FAILED: No valid CRL was found for the CA which issued the chain >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlySomeReasons EE Certificate Test17,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlySomeReasons EE Certificate Test20,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: affiliationChanged >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid onlySomeReasons EE Certificate Test21,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: affiliationChanged >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid IDP with indirectCRL EE Certificate Test23,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=indirectCRL CA2, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid IDP with indirectCRL EE Certificate Test26,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=indirectCRL CA2, O=Test Certificates 2011, C=US" >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=indirectCRL CA2, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid cRLIssuer EE Certificate Test27,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=indirectCRL CA2, O=Test Certificates 2011, C=US" >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid cRLIssuer EE Certificate Test31,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid cRLIssuer EE Certificate Test32,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid cRLIssuer EE Certificate Test34,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid cRLIssuer EE Certificate Test35,O=Test Certificates 2011,C=US (category: CRL): Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=deltaCRL CA3, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRL EE Certificate Test10,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=deltaCRL CA3, O=Test Certificates 2011, C=US" >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test2,OU=excludedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test2,OU=excludedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test2,OU=excludedSubtree1,O=Test Certificates 2011,C=US is not in the permitted set of DNs. >Result (short): FAILED: The certificate contains the email address 4: C=US,O=Test Certificates 2011,OU=excludedSubtree1,CN=Invalid DN nameConstraints EE Certificate Test3 which is not in the permitted set of email addresses. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test3,OU=permittedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate contains the email address 4: C=US,O=Test Certificates 2011,OU=excludedSubtree1,CN=Invalid DN nameConstraints EE Certificate Test3 which is not in the permitted set of email addresses. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test7,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test7,OU=excludedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test7,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test8,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test8,OU=excludedSubtree1,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test8,OU=excludedSubtree1,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: The certificate DN CN=Invalid DN nameConstraints EE Certificate Test9,OU=excludedSubtree2,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid DN nameConstraints EE Certificate Test9,OU=excludedSubtree2,O=Test Certificates 2011,C=US (category: NAME_CONSTRAINT): The certificate DN CN=Invalid DN nameConstraints EE Certificate Test9,OU=excludedSubtree2,O=Test Certificates 2011,C=US is inside of the excluded set of DNs. >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid distributionPoint EE Certificate Test2,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid distributionPoint EE Certificate Test3,O=Test Certificates 2011,C=US (category: CRL): Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid distributionPoint EE Certificate Test6,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid distributionPoint EE Certificate Test8,O=Test Certificates 2011,C=US (category: CRL): Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (short): FAILED: Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid distributionPoint EE Certificate Test9,O=Test Certificates 2011,C=US (category: CRL): Did not find a matching certificate CRL issuing distribution point name to the cRLIssuer of the CRL distribution point >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=deltaCRLIndicator No Base CA, O=Test Certificates 2011, C=US" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRLIndicator No Base EE Certificate Test1,O=Test Certificates 2011,C=US (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=deltaCRLIndicator No Base CA, O=Test Certificates 2011, C=US" >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRL EE Certificate Test3,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Tue Jun 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRL EE Certificate Test4,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Tue Jun 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRL EE Certificate Test6,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid deltaCRL EE Certificate Test9,O=Test Certificates 2011,C=US (category: CRL): Certificate was revoked at: Fri Jan 01 08:30:00 UTC 2010, the reason reported is: keyCompromise >Result (short): FAILED: Unknown critical extension was found: 2.16.840.1.101.2.1.12.2 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid Unknown Critical Certificate Extension EE Cert Test2,O=Test Certificates 2011,C=US (category: X509_BASIC): Unknown critical extension was found: 2.16.840.1.101.2.1.12.2 >Tests run: 84, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.916 sec - in eu.emi.security.authn.x509.impl.NISTValidator13_16Test >Running eu.emi.security.authn.x509.impl.NISTValidator06_12Test >Result (short): FAILED: The selected CA certificate does not contain the mandatory Basic Constraints extension >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=Missing basicConstraints CA,O=Test Certificates 2011,C=US (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Result (short): FAILED: The certificate is no CA certificate but used as one >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=basicConstraints Critical cA False CA,O=Test Certificates 2011,C=US (category: X509_CHAIN): The certificate is no CA certificate but used as one >Result (short): FAILED: The certificate is no CA certificate but used as one >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=basicConstraints Not Critical cA False CA,O=Test Certificates 2011,C=US (category: X509_CHAIN): The certificate is no CA certificate but used as one >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Issuer of the certificate is not eligible to sign certificates as its certificate has no keyCertSign flag set in its KeyUsage extension. >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=keyUsage Critical keyCertSign False CA,O=Test Certificates 2011,C=US (category: X509_CHAIN): Issuer of the certificate is not eligible to sign certificates as its certificate has no keyCertSign flag set in its KeyUsage extension. >Result (short): FAILED: Issuer of the certificate is not eligible to sign certificates as its certificate has no keyCertSign flag set in its KeyUsage extension. >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=keyUsage Not Critical keyCertSign False CA,O=Test Certificates 2011,C=US (category: X509_CHAIN): Issuer of the certificate is not eligible to sign certificates as its certificate has no keyCertSign flag set in its KeyUsage extension. >Result (short): FAILED: CRL checking failed: issuer certificate does not permit CRL signing. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid keyUsage Critical cRLSign False EE Certificate Test4,O=Test Certificates 2011,C=US (category: CRL): CRL checking failed: issuer certificate does not permit CRL signing. >Result (short): FAILED: CRL checking failed: issuer certificate does not permit CRL signing. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=Invalid keyUsage Not Critical cRLSign False EE Certificate Test5,O=Test Certificates 2011,C=US (category: CRL): CRL checking failed: issuer certificate does not permit CRL signing. >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Result (short): FAILED: Total chain length exceeds the limit >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): Total chain length exceeds the limit >Tests run: 22, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.388 sec - in eu.emi.security.authn.x509.impl.NISTValidator06_12Test >Running eu.emi.security.authn.x509.impl.GLiteValidatorTest >Test Case: trusted-certs/trusted_client >Test Case: trusted-certs/trusted_client_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver >Test Case: trusted-certs/trusted_clientserver_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient >Test Case: trusted-certs/trusted_fclient_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none >Test Case: trusted-certs/trusted_none_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server >Test Case: trusted-certs/trusted_server_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_clientserver_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_fclient_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_none_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted none revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_server_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted server revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_client_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client.proxy.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_clientserver_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver.proxy.grid_proxy >Test Case: trusted-certs/trusted_clientserver.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted clientserver,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_fclient_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient.proxy.grid_proxy >Test Case: trusted-certs/trusted_fclient.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted flag client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_none_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none.proxy.grid_proxy >Test Case: trusted-certs/trusted_none.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted none,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_server_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server.proxy.grid_proxy >Test Case: trusted-certs/trusted_server.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted server,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.proxy_rfc.grid_proxy >Result (short): FAILED: At the current position the proxy certificates chain exceeded its length limit. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=rfc proxy,CN=rfc path len 1 proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): At the current position the proxy certificates chain exceeded its length limit. >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy.grid_proxy >Result (short): FAILED: The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.proxy_rfc.grid_proxy >Result (short): FAILED: The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=limited rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_anyp.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_indep.grid_proxy >Test Case: trusted-certs/trusted_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_clientserver_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_fclient_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_none_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted none revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_server_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted server revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: fake-certs/fake_client >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy.grid_proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: trusted-certs/trusted_client.proxy_dnerror2.grid_proxy >Result (short): FAILED: The proxy subject without its last CN component is not equal to its issuer name >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INVALID_PROXY_CERT): The proxy subject without its last CN component is not equal to its issuer name >Test Case: trusted-certs/trusted_client.proxy_dnerror.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=dnerror proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_dnerror.proxy.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=dnerror proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy.proxy_dnerror.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=proxy, CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=dnerror proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=proxy, CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): The certificate is no CA certificate but used as one >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_exp.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy.grid_proxy >Test Case: trusted-certs/trusted_bigclient >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-newhash-all//7362bbd6.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-newhash-all//7362bbd6.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-newhash-all//7362bbd6.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-newhash-all//7362bbd6.namespaces:1 >Test Case: big-certs/big_client.proxy.grid_proxy >Test Case: big-certs/big_client.proxy.proxy.grid_proxy >Test Case: slash-certs/slash_client_slash >Test Case: trusted-certs/trusted_client >Test Case: trusted-certs/trusted_client_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver >Test Case: trusted-certs/trusted_clientserver_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient >Test Case: trusted-certs/trusted_fclient_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none >Test Case: trusted-certs/trusted_none_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server >Test Case: trusted-certs/trusted_server_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_clientserver_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_fclient_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_none_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted none revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_server_rev >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted server revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_client_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client.proxy.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_clientserver_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver.proxy.grid_proxy >Test Case: trusted-certs/trusted_clientserver.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted clientserver,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_fclient_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient.proxy.grid_proxy >Test Case: trusted-certs/trusted_fclient.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted flag client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_none_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none.proxy.grid_proxy >Test Case: trusted-certs/trusted_none.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted none,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_server_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server.proxy.grid_proxy >Test Case: trusted-certs/trusted_server.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted server,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.proxy_rfc.grid_proxy >Result (short): FAILED: At the current position the proxy certificates chain exceeded its length limit. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=rfc proxy,CN=rfc path len 1 proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): At the current position the proxy certificates chain exceeded its length limit. >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy.grid_proxy >Result (short): FAILED: The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.proxy_rfc.grid_proxy >Result (short): FAILED: The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=limited rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_anyp.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_indep.grid_proxy >Test Case: trusted-certs/trusted_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:39 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_clientserver_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_fclient_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_none_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted none revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:54 UTC 2010, the reason reported is: unspecified >Test Case: trusted-certs/trusted_server_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted server revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:37:53 UTC 2010, the reason reported is: unspecified >Test Case: fake-certs/fake_client >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy.grid_proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: trusted-certs/trusted_client.proxy_dnerror2.grid_proxy >Result (short): FAILED: The proxy subject without its last CN component is not equal to its issuer name >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INVALID_PROXY_CERT): The proxy subject without its last CN component is not equal to its issuer name >Test Case: trusted-certs/trusted_client.proxy_dnerror.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=dnerror proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_dnerror.proxy.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=dnerror proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy.proxy_dnerror.grid_proxy >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=proxy, CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=dnerror proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=proxy, CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=trusted client, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): The certificate is no CA certificate but used as one >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_exp.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy.grid_proxy >Test Case: trusted-certs/trusted_bigclient >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates//84d6f82e.namespaces:1 >Test Case: big-certs/big_client.proxy.grid_proxy >Test Case: big-certs/big_client.proxy.proxy.grid_proxy >Test Case: trusted-certs/trusted_client >Test Case: trusted-certs/trusted_client_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver >Test Case: trusted-certs/trusted_clientserver_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient >Test Case: trusted-certs/trusted_fclient_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none >Test Case: trusted-certs/trusted_none_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server >Test Case: trusted-certs/trusted_server_exp >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 0 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client_rev >Test Case: trusted-certs/trusted_clientserver_rev >Test Case: trusted-certs/trusted_fclient_rev >Test Case: trusted-certs/trusted_none_rev >Test Case: trusted-certs/trusted_server_rev >Test Case: trusted-certs/trusted_client_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:38 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client.proxy.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_clientserver_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted clientserver expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_clientserver.proxy.grid_proxy >Test Case: trusted-certs/trusted_clientserver.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted clientserver,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_fclient_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:52 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag client expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_fclient.proxy.grid_proxy >Test Case: trusted-certs/trusted_fclient.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted flag client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_none_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted none expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_none.proxy.grid_proxy >Test Case: trusted-certs/trusted_none.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted none,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_server_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: Wed Dec 15 17:37:53 UTC 2010 >error at position 1 in chain, problematic certificate subject: CN=trusted flag server expired,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_server.proxy.grid_proxy >Test Case: trusted-certs/trusted_server.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=trusted server,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.proxy_rfc.grid_proxy >Result (short): FAILED: At the current position the proxy certificates chain exceeded its length limit. >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=rfc proxy,CN=rfc path len 1 proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): At the current position the proxy certificates chain exceeded its length limit. >Test Case: trusted-certs/trusted_client.proxy_rfc_plen.proxy_rfc.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy.grid_proxy >Result (short): FAILED: The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains proxy certificates of different types (RFC/legacy/draft proxies are mixed) >Test Case: trusted-certs/trusted_client.proxy_rfc_lim.proxy_rfc.grid_proxy >Result (short): FAILED: The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=rfc proxy,CN=limited rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Test Case: trusted-certs/trusted_client.proxy_rfc.proxy_rfc_lim.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_anyp.grid_proxy >Test Case: trusted-certs/trusted_client.proxy_rfc_indep.grid_proxy >Test Case: trusted-certs/trusted_client_rev.proxy.grid_proxy >Test Case: trusted-certs/trusted_clientserver_rev.proxy.grid_proxy >Test Case: trusted-certs/trusted_fclient_rev.proxy.grid_proxy >Test Case: trusted-certs/trusted_none_rev.proxy.grid_proxy >Test Case: trusted-certs/trusted_server_rev.proxy.grid_proxy >Test Case: fake-certs/fake_client >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: fake-certs/fake_client.proxy.grid_proxy >Result (short): FAILED: No trusted CA certificate was found for the certificate chain >Result (full) : FAILED The following validation errors were found: >error affecting the whole chain (category: X509_CHAIN): No trusted CA certificate was found for the certificate chain >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=fake client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): Trusted issuer of this certificate was not established >Test Case: trusted-certs/trusted_client.proxy_dnerror2.grid_proxy >Result (short): FAILED: The proxy subject without its last CN component is not equal to its issuer name >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INVALID_PROXY_CERT): The proxy subject without its last CN component is not equal to its issuer name >Test Case: trusted-certs/trusted_client.proxy_dnerror.grid_proxy >Result (short): FAILED: The selected CA certificate does not contain the mandatory Basic Constraints extension >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_dnerror.proxy.grid_proxy >Result (short): FAILED: The selected CA certificate does not contain the mandatory Basic Constraints extension >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy.proxy_dnerror.grid_proxy >Result (short): FAILED: The certificate is no CA certificate but used as one >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_CHAIN): The certificate is no CA certificate but used as one >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >error at position 2 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): The selected CA certificate does not contain the mandatory Basic Constraints extension >Test Case: trusted-certs/trusted_client.proxy_exp.proxy.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy_exp.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy_exp.grid_proxy >Result (short): FAILED: Certificate has expired on: 12/15/10 5:37 PM >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=proxy,CN=proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: X509_BASIC): Certificate has expired on: 12/15/10 5:37 PM >Test Case: trusted-certs/trusted_client.proxy.proxy.grid_proxy >Test Case: trusted-certs/trusted_bigclient >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-withoutCrl//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-withoutCrl//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-withoutCrl//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-withoutCrl//84d6f82e.namespaces:1 >Test Case: big-certs/big_client.proxy.grid_proxy >Test Case: big-certs/big_client.proxy.proxy.grid_proxy >Test Case: trusted-certs/trusted_client >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: trusted-certs/trusted_client_rev >Result (short): FAILED: No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Result (full) : FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=trusted client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): No valid CRL was found for the CA which issued the chain Cause: No CRLs found for issuer "CN=the trusted CA, OU=Relaxation, O=Utopia, L=Tropic, C=UG" >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootwithpolicy//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootwithpolicy//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootwithpolicy//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootwithpolicy//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-subcawithpolicy//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-subcawithpolicy//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-subcawithpolicy//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-subcawithpolicy//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_fullchainclient.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_client.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_client.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_client_rev.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >error at position 1 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_client_rev.proxy.proxy.grid_proxy >Result (short): FAILED: Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: CRL): Certificate was revoked at: Thu Dec 16 17:38:16 UTC 2010, the reason reported is: unspecified >error at position 2 in chain, problematic certificate subject: CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client revoked,OU=Relaxation,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 1 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Test Case: subsubca-certs/subsubca_clientbaddn.proxy.proxy.grid_proxy >Result (short): FAILED: The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Result (full) : FAILED The following validation errors were found: >error at position 2 in chain, problematic certificate subject: CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG (category: NAMESPACE): The certificate subject CN=subsubca client with bad DN,OU=Chilling,O=Utopia,L=Tropic,C=UG is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: src/test/resources/glite-utiljava/grid-security/certificates-rootallowsubsubdeny//84d6f82e.namespaces:1 >Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.777 sec - in eu.emi.security.authn.x509.impl.GLiteValidatorTest >Running eu.emi.security.authn.x509.impl.X500NameUtilsTest >Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.038 sec - in eu.emi.security.authn.x509.impl.X500NameUtilsTest >Running eu.emi.security.authn.x509.impl.CRLTest >Got connection >http://127.0.0.1:42425/crl.pem java.net.SocketTimeoutException: Read timed out >Loaded 0 : 19560kb >Loaded 10 : 13880kb >Loaded 20 : 33249kb >Loaded 30 : 27167kb >Loaded 40 : 40324kb >Loaded 50 : 48695kb >Loaded 60 : 40892kb >Loaded 70 : 48426kb >Loaded 80 : 54322kb >Loaded 90 : 55328kb >Loaded 100 : 59860kb >Loaded 110 : 59381kb >Loaded 120 : 50366kb >Loaded 130 : 54218kb >Loaded 140 : 58477kb >Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 41.605 sec - in eu.emi.security.authn.x509.impl.CRLTest >Running eu.emi.security.authn.x509.impl.OpensslNamesTest >2.5.4.3.3.2.222=#030300FEFF >/2.5.4.3.3.2.222=\xFE\xFF >/2.5.4.3.3.2.222=\xFE\xFF >CN=qwe??? >/CN=qwe\xC3\xB3\xC5\x82\xC4\x85 >/CN=qwe\xC3\xB3\xC5\x82\xC4\x85 >2.5.4.3.3.2.222=#038180008182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7C8C9CACBCCCDCECFD0D1D2D3D4D5D6D7D8D9DADBDCDDDEDFE0E1E2E3E4E5E6E7E8E9EAEBECEDEEEFF0F1F2F3F4F5F6F7F8F9FAFBFCFDFEFF,O=org2,2.5.4.3.3.2.222=#0C152C225C2B3D3C3E3B616C61C3B3C582C485C59BC487,C=PL,CN=Krzys/O\=ICM >/CN=Krzys/O=ICM/C=PL/2.5.4.3.3.2.222=,"\+=<>;ala\xC3\xB3\xC5\x82\xC4\x85\xC5\x9B\xC4\x87/O=org2/2.5.4.3.3.2.222=\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C\x8D\x8E\x8F\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9A\x9B\x9C\x9D\x9E\x9F\xA0\xA1\xA2\xA3\xA4\xA5\xA6\xA7\xA8\xA9\xAA\xAB\xAC\xAD\xAE\xAF\xB0\xB1\xB2\xB3\xB4\xB5\xB6\xB7\xB8\xB9\xBA\xBB\xBC\xBD\xBE\xBF\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF\xD0\xD1\xD2\xD3\xD4\xD5\xD6\xD7\xD8\xD9\xDA\xDB\xDC\xDD\xDE\xDF\xE0\xE1\xE2\xE3\xE4\xE5\xE6\xE7\xE8\xE9\xEA\xEB\xEC\xED\xEE\xEF\xF0\xF1\xF2\xF3\xF4\xF5\xF6\xF7\xF8\xF9\xFA\xFB\xFC\xFD\xFE\xFF >/CN=Krzys/O=ICM/C=PL/2.5.4.3.3.2.222=,"\+=<>;ala\xC3\xB3\xC5\x82\xC4\x85\xC5\x9B\xC4\x87/O=org2/2.5.4.3.3.2.222=\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C\x8D\x8E\x8F\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9A\x9B\x9C\x9D\x9E\x9F\xA0\xA1\xA2\xA3\xA4\xA5\xA6\xA7\xA8\xA9\xAA\xAB\xAC\xAD\xAE\xAF\xB0\xB1\xB2\xB3\xB4\xB5\xB6\xB7\xB8\xB9\xBA\xBB\xBC\xBD\xBE\xBF\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF\xD0\xD1\xD2\xD3\xD4\xD5\xD6\xD7\xD8\xD9\xDA\xDB\xDC\xDD\xDE\xDF\xE0\xE1\xE2\xE3\xE4\xE5\xE6\xE7\xE8\xE9\xEA\xEB\xEC\xED\xEE\xEF\xF0\xF1\xF2\xF3\xF4\xF5\xF6\xF7\xF8\xF9\xFA\xFB\xFC\xFD\xFE\xFF >CN=Krzys/O\=ICM >/CN=Krzys/O=ICM >/CN=Krzys/O=ICM >EMAIL=a@b,E=b@c,EMAILADDRESS=c@d,generation=2nd >/generationQualifier=2nd/emailAddress=c@d/emailAddress=b@c/emailAddress=a@b >/generationQualifier=2nd/EMAILADDRESS=c@d/EMAILADDRESS=b@c/EMAILADDRESS=a@b >Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.047 sec - in eu.emi.security.authn.x509.impl.OpensslNamesTest >Running eu.emi.security.authn.x509.proxy.ExtensionsTest >Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.002 sec - in eu.emi.security.authn.x509.proxy.ExtensionsTest >Running eu.emi.security.authn.x509.proxy.PathRetrievalTest >FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=1321141098,CN=limited rfc proxy,CN=trusted client,OU=Relaxation,O=Utopia,L=Tropic,C=UG (category: INCONSISTENT_PROXY_CHAIN): The proxy chain contains an unlimited proxy certificate after a limited proxy certificate >Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.288 sec - in eu.emi.security.authn.x509.proxy.PathRetrievalTest >Running eu.emi.security.authn.x509.proxy.ProxyGenerationTest >Running func:proxy-make functional test >Running func:cli-srv-sha2 functional test >Running regression:proxy-time-overflow test >Got: 3549601138000 >Should be earlier: 3549601137835 >Should be later: 3549601140815 >OK >OK >FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=976623119,CN=PDPTest Server,O=Testing Organization,L=Testing City,C=EU (category: X509_BASIC): Certificate has expired on: 1/1/70 3:25 AM >Running func:proxy-make-withCustomExt functional test >Running func:proxy-delegate functional test >Tests run: 11, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 6.606 sec <<< FAILURE! - in eu.emi.security.authn.x509.proxy.ProxyGenerationTest >testSha2Proxy(eu.emi.security.authn.x509.proxy.ProxyGenerationTest) Time elapsed: 0.278 sec <<< FAILURE! >org.junit.ComparisonFailure: expected:<[1.2.840.113549.1.1.14]> but was:<[SHA224withRSA]> > at org.junit.Assert.assertEquals(Assert.java:115) > at org.junit.Assert.assertEquals(Assert.java:144) > at eu.emi.security.authn.x509.proxy.ProxyGenerationTest.testSha2Proxy(ProxyGenerationTest.java:387) > at eu.emi.security.authn.x509.proxy.ProxyGenerationTest.testSha2Proxy(ProxyGenerationTest.java:369) >Running eu.emi.security.authn.x509.ns.OpensslDirTest >------ >TEST 1 >0) got result: OK >1) got result: OK >2) got result: OK >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >4) got result: OK >5) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >7) got result: OK >8) got result: OK >9) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >------ >TEST 2 >0) got result: OK >1) got result: OK >2) got result: OK >3) got result: OK >4) got result: OK >5) got result: OK >6) got result: OK >7) got result: OK >8) got result: OK >9) got result: OK >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >------ >TEST 3 >0) got result: OK >1) got result: OK >2) got result: OK >3) got result: OK >4) got result: OK >5) got result: OK >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >7) got result: OK >8) got result: OK >9) got result: OK >10) got result: OK >------ >TEST 4 >0) got result: OK >1) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >2) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >4) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >5) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >7) got result: OK >8) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >9) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >------ >TEST 5 >0) got result: OK >1) got result: OK >2) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >4) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >5) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): Namespace definition for the certificate issuer (CN=The root CA1,O=EMITest,C=EU) is not defined, and namespaces are configured to be required. >7) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >8) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >9) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >------ >TEST 6 >0) got result: OK >1) got result: OK >2) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >4) got result: OK >5) got result: OK >6) got result: OK >7) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >8) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >9) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >------ >TEST 7 >0) got result: OK >1) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >2) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >4) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >5) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >7) got result: OK >8) got result: OK >9) got result: OK >10) got result: OK >------ >TEST 8 >0) got result: OK >1) got result: OK >2) got result: OK >3) got result: OK >4) got result: OK >5) got result: OK >6) got result: OK >7) got result: OK >8) got result: OK >9) got result: OK >10) got result: OK >------ >TEST 9 >0) got result: OK >1) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >2) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >3) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >4) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >5) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >6) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.namespaces:1 >7) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >8) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >9) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >10) got result: FAILED The following validation errors were found: >error at position 0 in chain, problematic certificate subject: CN=User1,O=EMITest,C=EU (category: NAMESPACE): The certificate subject CN=User1,O=EMITest,C=EU is not accepted by any rule of the the relevant namespace policies. Policies which matches the issuer are: /builddir/build/BUILD/canl-java-canl-2.1.0/target/test-tmp/openssl-nsTest/77ab7b18.signing_policy >Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.696 sec - in eu.emi.security.authn.x509.ns.OpensslDirTest >Running eu.emi.security.authn.x509.ns.GlobusParserTest >Got an expected error for file src/test/resources/namespaces/20000001.signing_policy: Syntax problem, expected token 'X509' but got: 'X609 '/C=EU/O=Test Organization/CN=AAA Certificate Services' >Got an expected error for file src/test/resources/namespaces/20000002.signing_policy: Syntax problem, expected token 'pos_rights' but got: 'cond_subjects globus '"/C=EU/O=Test Organization/CN=AAA Certificate Services" "/C=EU/O=Test Organization/OU=http://www.example.com/CN=Client Authentication and Email"' >Got an expected error for file src/test/resources/namespaces/20000003.signing_policy: Syntax problem, expected space character(s) here: ek '"/C=EU/O=Test Organization/CN=AAA Certificate Services" "/C=EU/O=Test Organization/OU=http://www.example.com/CN=Client Authentication and Email"' >Got an expected error for file src/test/resources/namespaces/20000004.signing_policy: Syntax problem, quoted string is not properly ended: '"/C=EU/O=Test Organization/CN=AAA Certificate Services" "/C=EU/O=Test Organization/OU=http://www.example.com/CN=Client Authentication and Email" >Got an expected error for file src/test/resources/namespaces/20000005.signing_policy: Syntax problem, space character(s) missing in: "/C=EU/O=Test Organization/CN=AAA""CN=Certificate Services" >Testing file src/test/resources/namespaces/f2089c29.0 >Testing file 3232b9bc.signing_policy >Testing file d0c2a341.signing_policy >Testing file 1c3f2ca8.signing_policy >Testing file 163af95c.signing_policy >Testing file 69105f4f.signing_policy >Testing file 10718cba.signing_policy >Testing file 9cd75e87.signing_policy >Testing file 99f9f5a3.signing_policy >Testing file f2e89fe3.signing_policy >Testing file e13e0fcf.signing_policy >Testing file afe55e66.signing_policy >Testing file edca0fc0.signing_policy >Testing file 4b2783ac.signing_policy >Testing file afed687d.signing_policy >Testing file 1691b9ba.signing_policy >Testing file e5cc84c2.signing_policy >Testing file fc1898ec.signing_policy >Testing file 709bed08.signing_policy >Testing file 169d7f9c.signing_policy >Testing file 0a12b607.signing_policy >Testing file f5ead794.signing_policy >Testing file 295adc19.signing_policy >Testing file 20ce830e.signing_policy >Testing file e72045ce.signing_policy >Testing file c7a717ce.signing_policy >Testing file 4a96b1ea.signing_policy >Testing file b7bcb7b2.signing_policy >Testing file 3d5be7bc.signing_policy >Testing file 742edd45.signing_policy >Testing file a9082267.signing_policy >Testing file 2a237f16.signing_policy >Testing file 71a89a47.signing_policy >Testing file 55994d72.signing_policy >Testing file 8a047de1.signing_policy >Testing file a87d9192.signing_policy >Testing file 28a58577.signing_policy >Testing file 2f3fadf6.signing_policy >Testing file 8a661490.signing_policy >Testing file 722e5071.signing_policy >Testing file 9dd23746.signing_policy >Testing file ff783690.signing_policy >Testing file ff94d436.signing_policy >Testing file d11f973e.signing_policy >Testing file d0b701c0.signing_policy >Testing file d1b603c3.signing_policy >Testing file 1b6f5ede.signing_policy >Testing file 74c6eaeb.signing_policy >Testing file 09ff08b7.signing_policy >Testing file 679cff61.signing_policy >Testing file a02131f7.signing_policy >Testing file d254cc30.signing_policy >Testing file 11b4a5a2.signing_policy >Testing file dd4b34ea.signing_policy >Testing file a317c467.signing_policy >Testing file 3c58f906.signing_policy >Testing file 0a2bac92.signing_policy >Testing file 7b54708e.signing_policy >Testing file 75680d2e.signing_policy >Testing file 38f7145f.signing_policy >Testing file ffc3d59b.signing_policy >Testing file 5cf9d536.signing_policy >Testing file 9b95bbf2.signing_policy >Testing file e8ac4b61.signing_policy >Testing file 9ff26ea4.signing_policy >Testing file 468d15b3.signing_policy >Testing file b3222f9e.signing_policy >Testing file 2694e4f2.signing_policy >Testing file ba2f39ca.signing_policy >Testing file 2418a3f3.signing_policy >Testing file 1f0e8352.signing_policy >Testing file 6fee79b0.signing_policy >Testing file 1e12d831.signing_policy >Testing file 6e3b436b.signing_policy >Testing file 712ae4cc.signing_policy >Testing file 1d879c6c.signing_policy >Testing file 0a49430a.signing_policy >Testing file e8d818e6.signing_policy >Testing file 98ef0ee5.signing_policy >Testing file 393f7863.signing_policy >Testing file 1149214e.signing_policy >Testing file 16da7552.signing_policy >Testing file b2771d44.signing_policy >Testing file 24c3ccde.signing_policy >Testing file cc800af0.signing_policy >Testing file 3f0f4285.signing_policy >Testing file 4798da47.signing_policy >Testing file 2ac09305.signing_policy >Testing file 684261aa.signing_policy >Testing file d33760ec.signing_policy >Testing file 7d0d064a.signing_policy >Testing file da75f6a8.signing_policy >Testing file 82b36fca.signing_policy >Testing file 1f3834d0.signing_policy >Testing file 5e15f3bd.signing_policy >Testing file 617ff41b.signing_policy >Testing file bffbd7d0.signing_policy >Testing file dc75341f.signing_policy >Testing file 7721d4d3.signing_policy >Testing file ce33db76.signing_policy >Testing file 9ec3a561.signing_policy >Testing file b93d6240.signing_policy >Testing file 126f0acf.signing_policy >Testing file c48c63f3.signing_policy >Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.009 sec - in eu.emi.security.authn.x509.ns.GlobusParserTest >Running eu.emi.security.authn.x509.ns.NamespacesParserTest >Got an expected error for file src/test/resources/namespaces/00000001.0: Policy file name src/test/resources/namespaces/00000001.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Got an expected error for file src/test/resources/namespaces/00000002.0: Policy file name src/test/resources/namespaces/00000002.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Got an expected error for file src/test/resources/namespaces/00000003.0: Policy file name src/test/resources/namespaces/00000003.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Got an expected error for file src/test/resources/namespaces/00000004.0: Policy file name src/test/resources/namespaces/00000004.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Got an expected error for file src/test/resources/namespaces/00000005.0: Policy file name src/test/resources/namespaces/00000005.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Got an expected error for file src/test/resources/namespaces/00000006.0: Policy file name src/test/resources/namespaces/00000006.0 is incorrect: it must be formed from 8 charater subject hash and '.namespaces' extension. >Testing file src/test/resources/namespaces/4798da47.0 >Testing file 7b54708e.namespaces >Testing file 9b95bbf2.namespaces >Testing file 9b59ecad.namespaces >Testing file be87b272.namespaces >Testing file 2c0df5ae.namespaces >Testing file 10718cba.namespaces >Testing file 7f4db168.namespaces >Testing file 709bed08.namespaces >Testing file b1ac0d46.namespaces >Testing file b459ca48.namespaces >Testing file 1f3834d0.namespaces >Testing file 684261aa.namespaces >Testing file 727146a8.namespaces >Testing file 2418a3f3.namespaces >Testing file 25694cc4.namespaces >Testing file 9d78dd37.namespaces >Testing file 1c3f2ca8.namespaces >Testing file edca0fc0.namespaces >Testing file a47867ef.namespaces >Testing file 60ef89df.namespaces >Testing file 55994d72.namespaces >Testing file 9df51c42.namespaces >Testing file 3fb4d8a6.namespaces >Testing file 5a68802a.namespaces >Testing file 09ff08b7.namespaces >Testing file 13ba0088.namespaces >Testing file 3de400d0.namespaces >Testing file d71343e8.namespaces >Testing file 0a49430a.namespaces >Testing file 2ac09305.namespaces >Testing file 080911ac.namespaces >Testing file 7022e3c4.namespaces >Testing file bca425d1.namespaces >Testing file 1e12d831.namespaces >Testing file dd9d2a1a.namespaces >Testing file b874affe.namespaces >Testing file 7ecb2657.namespaces >Testing file b93d6240.namespaces >Testing file 6fee79b0.namespaces >Testing file 07397040.namespaces >Testing file 71a89a47.namespaces >Testing file 03b260e0.namespaces >Testing file 9ff26ea4.namespaces >Testing file ff430c7f.namespaces >Testing file 719a853d.namespaces >Testing file d3619baa.namespaces >Testing file 4d654d1d.namespaces >Testing file 585d9326.namespaces >Testing file d0b701c0.namespaces >Testing file 1149214e.namespaces >Testing file 2f2f573f.namespaces >Testing file 86b6fa2c.namespaces >Testing file 4798da47.namespaces >Testing file e8ac4b61.namespaces >Testing file 64d1f6f4.namespaces >Testing file e580c4f9.namespaces >Testing file ce33db76.namespaces >Testing file 9cd75e87.namespaces >Testing file 8e6538d2.namespaces >Testing file 2f3fadf6.namespaces >Testing file ee64a828.namespaces >Testing file 86dacba7.namespaces >Testing file d1b603c3.namespaces >Testing file 5d674a88.namespaces >Testing file 722e5071.namespaces >Testing file 2eb756e6.namespaces >Testing file 84df5188.namespaces >Testing file 28a58577.namespaces >Testing file 87429ba3.namespaces >Testing file 5bb7d63e.namespaces >Testing file dd4b34ea.namespaces >Testing file 94b468c6.namespaces >Testing file 2376bd8e.namespaces >Testing file 163af95c.namespaces >Testing file 12d0da68.namespaces >Testing file 90064a82.namespaces >Testing file 30feecdf.namespaces >Testing file 8a661490.namespaces >Testing file d072977b.namespaces >Testing file 157753a5.namespaces >Testing file 18700496.namespaces >Testing file cc800af0.namespaces >Testing file 4ce1cf99.namespaces >Testing file 0119347c.namespaces >Testing file 075047ca.namespaces >Testing file 99f9f5a3.namespaces >Testing file 18bc5b05.namespaces >Testing file 33eb0f86.namespaces >Testing file b2771d44.namespaces >Testing file 03a1fa38.namespaces >Testing file 56084620.namespaces >Testing file d0cd0b27.namespaces >Testing file 3c58f906.namespaces >Testing file afe55e66.namespaces >Testing file fdf90b95.namespaces >Testing file a9082267.namespaces >Testing file 524cae41.namespaces >Testing file 83676c6b.namespaces >Testing file 8c13c962.namespaces >Testing file d492aff2.namespaces >Testing file 089450c2.namespaces >Testing file a02131f7.namespaces >Testing file 0a12b607.namespaces >Testing file 9629661e.namespaces >Testing file cc5645bd.namespaces >Testing file d11f973e.namespaces >Testing file 0e635db3.namespaces >Testing file a87d9192.namespaces >Testing file bdf45114.namespaces >Testing file 6e3b436b.namespaces >Testing file 30ffc224.namespaces >Testing file 24c3ccde.namespaces >Testing file b38b4d8c.namespaces >Testing file e21dc0c0.namespaces >Testing file ef300431.namespaces >Testing file 522b8537.namespaces >Testing file 3d5be7bc.namespaces >Testing file e2023333.namespaces >Testing file ff94d436.namespaces >Testing file 20ce830e.namespaces >Testing file 6cad3d39.namespaces >Testing file fc1898ec.namespaces >Testing file c48c63f3.namespaces >Testing file 74c6eaeb.namespaces >Testing file 3d863bc5.namespaces >Testing file bffbd7d0.namespaces >Testing file e8d818e6.namespaces >Testing file 468d15b3.namespaces >Testing file e5cc84c2.namespaces >Testing file 156a0f0f.namespaces >Testing file 9d772be7.namespaces >Testing file 3ccc03a5.namespaces >Testing file 2a237f16.namespaces >Testing file 5cf9d536.namespaces >Testing file 7ed47087.namespaces >Testing file 709afd2b.namespaces >Testing file f4401b90.namespaces >Testing file 75680d2e.namespaces >Testing file 16da7552.namespaces >Testing file 1e4f9475.namespaces >Testing file 5dda73d8.namespaces >Testing file bb01cea1.namespaces >Testing file b13cc6df.namespaces >Testing file 1f0e8352.namespaces >Testing file d9be2151.namespaces >Testing file b7bcb7b2.namespaces >Testing file 1e43b9cc.namespaces >Testing file 9ef5f911.namespaces >Testing file 1e3261e6.namespaces >Testing file f2e89fe3.namespaces >Testing file 7721d4d3.namespaces >Testing file 885cc27c.namespaces >Testing file ff783690.namespaces >Testing file a317c467.namespaces >Testing file 98ef0ee5.namespaces >Testing file dc75341f.namespaces >Testing file 01b5d333.namespaces >Testing file 295adc19.namespaces >Testing file 8a047de1.namespaces >Testing file 1691b9ba.namespaces >Testing file bfafd1bd.namespaces >Testing file 4220f3a5.namespaces >Testing file f57f9e36.namespaces >Testing file 393f7863.namespaces >Testing file c692a373.namespaces >Testing file d254cc30.namespaces >Testing file 617ff41b.namespaces >Testing file ba2f39ca.namespaces >Testing file d0c2a341.namespaces >Testing file 20b7db76.namespaces >Testing file cd536adc.namespaces >Testing file 3839294d.namespaces >Testing file 7d0d064a.namespaces >Testing file 9dd23746.namespaces >Testing file 4b2783ac.namespaces >Testing file dd51b42a.namespaces >Testing file dfb080e4.namespaces >Testing file 3232b9bc.namespaces >Testing file 9036db5e.namespaces >Testing file 6a13d748.namespaces >Testing file d87163a8.namespaces >Testing file 3f0f4285.namespaces >Testing file c2868627.namespaces >Testing file 02a45931.namespaces >Testing file d38446c5.namespaces >Testing file 11b4a5a2.namespaces >Testing file f5ead794.namespaces >Testing file da75f6a8.namespaces >Testing file e13e0fcf.namespaces >Testing file dfcb9731.namespaces >Testing file 7cef5492.namespaces >Testing file 28776852.namespaces >Testing file 0a2bac92.namespaces >Testing file 742edd45.namespaces >Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.011 sec - in eu.emi.security.authn.x509.ns.NamespacesParserTest >Running eu.emi.security.authn.x509.ErrorTest >Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0 sec - in eu.emi.security.authn.x509.ErrorTest >Results : >Failed tests: > ProxyGenerationTest.testSha2Proxy:369->testSha2Proxy:387 expected:<[1.2.840.113549.1.1.14]> but was:<[SHA224withRSA]> >Tests run: 259, Failures: 1, Errors: 0, Skipped: 0 >[INFO] >[INFO] ------------------------------------------------------------------------ >[INFO] Skipping canl >[INFO] This project has been banned from the build due to previous failures. >[INFO] ------------------------------------------------------------------------ >[INFO] ------------------------------------------------------------------------ >[INFO] BUILD FAILURE >[INFO] ------------------------------------------------------------------------ >[INFO] Total time: 01:15 min >[INFO] Finished at: 2014-06-07T05:04:56+00:00 >[INFO] Final Memory: 19M/308M >[INFO] ------------------------------------------------------------------------ >[ERROR] Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.17:test (default-test) on project canl: There are test failures. >[ERROR] >[ERROR] Please refer to /builddir/build/BUILD/canl-java-canl-2.1.0/target/surefire-reports for the individual test results. >[ERROR] -> [Help 1] >[ERROR] >[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. >[ERROR] Re-run Maven using the -X switch to enable full debug logging. >[ERROR] >[ERROR] For more information about the errors and possible solutions, please read the following articles: >[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException >RPM build errors: >error: Bad exit status from /var/tmp/rpm-tmp.usOFcx (%build) > Bad exit status from /var/tmp/rpm-tmp.usOFcx (%build) >Child return code was: 1 >EXCEPTION: Command failed. See logs for output. > # ['bash', '--login', '-c', 'rpmbuild -bb --target noarch --nodeps builddir/build/SPECS/canl-java.spec'] >Traceback (most recent call last): > File "/usr/lib/python2.7/site-packages/mockbuild/trace_decorator.py", line 70, in trace > result = func(*args, **kw) > File "/usr/lib/python2.7/site-packages/mockbuild/util.py", line 376, in do > raise mockbuild.exception.Error, ("Command failed. See logs for output.\n # %s" % (command,), child.returncode) >Error: Command failed. See logs for output. > # ['bash', '--login', '-c', 'rpmbuild -bb --target noarch --nodeps builddir/build/SPECS/canl-java.spec'] >LEAVE do --> EXCEPTION RAISED >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 1106031
: 903678 |
903679
|
903680