--- old/src/share/classes/sun/security/provider/certpath/SunCertPathBuilder.java 2017-03-15 20:11:38.963639264 -0700 +++ new/src/share/classes/sun/security/provider/certpath/SunCertPathBuilder.java 2017-03-15 20:11:38.855639267 -0700 @@ -1,5 +1,5 @@ /* - * Copyright (c) 2000, 2015, Oracle and/or its affiliates. All rights reserved. + * Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it @@ -50,7 +50,7 @@ *

If successful, it returns a certification path which has successfully * satisfied all the constraints and requirements specified in the * PKIXBuilderParameters object and has been validated according to the PKIX - * path validation algorithm defined in RFC 3280. + * path validation algorithm defined in RFC 5280. * *

This implementation uses a depth-first search approach to finding * certification paths. If it comes to a point in which it cannot find @@ -343,7 +343,8 @@ checkers.add(policyChecker); // add the algorithm checker - checkers.add(new AlgorithmChecker(builder.trustAnchor)); + checkers.add(new AlgorithmChecker(builder.trustAnchor, + buildParams.date(), null)); BasicChecker basicChecker = null; if (nextState.keyParamsNeeded()) {