It is nest to post the verbatim error message and maybe also the URL to reproduce. But if you notice a sudden change in behavior and the cert is not expired, then it’s likely a server-side change. Did you try to connect with browser and OpenSSl cli?
You can debug JSSE connections but the exception message should be a good start: https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/ReadDebug.html Is the ca in the truststores you are using? Gruss Bernd -- http://bernd.eckenfels.net ________________________________ Von: security-dev <security-dev-r...@openjdk.java.net> im Auftrag von Kain, Michael T <michael.k...@unisys.com> Gesendet: Dienstag, April 20, 2021 6:05 PM An: security-dev@openjdk.java.net Cc: Kain, Michael T Betreff: How do I report a potential bug in OpenJDK? We’ve been using OpenJDK in a product and since March 17, OpenJDK seems to be reporting a “Certificate Unknown” error on a previously working certificate. Versions are 8.0.212.03, 8.0.282.8, 11.0.5.10, 11.0.10.9. Given that I’m a newbie – debug? Diagnostics? Changelog to look at possible patches which changed function? Mike ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Mike Kain | Distinguished Engineer and Security Architect, ClearPath MCP systems | ClearPath Forward Unisys | (610)727-5442 | michael.k...@unisys.com<mailto:michael.k...@unisys.com> 801 Lakeview Drive, Suite 100, Mailstop 2818, Blue Bell, PA 19422 [unisys_logo]<http://www.unisys.com/> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all devices. [Grey_LI]<http://www.linkedin.com/company/unisys> [Grey_TW] <http://twitter.com/unisyscorp> [Grey_GP] <https://plus.google.com/+UnisysCorp/posts> [Grey_YT] <http://www.youtube.com/theunisyschannel> [Grey_FB] <http://www.facebook.com/unisyscorp> [Grey_UB] <http://blogs.unisys.com/>
