On Tue, 28 Apr 2026 21:54:19 GMT, Jamil Nimeh <[email protected]> wrote:
>> Not sure I understand, both CA and EE have a validity that starts 1h before >> now and ends 1h after now. > > Correct, and "now" is evaluated at different points in time. It would almost > always be during the same second and therefore no problem, but on a slow > system under load, or right at the edge of a second "now" might be one second > in the future when the EE cert has its validity created, which puts the > notAfter potentially one second beyond beyond the notAfter of the CA that > issues it. Ok, but how does it matter for this test? ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/30944#discussion_r3157463606
