src/java.base/share/classes/sun/security/provider/certpath/BasicChecker.java

rev 16540 : 8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms

@@ -49,11 +49,11 @@
 import sun.security.x509.X500Name;
 import sun.security.util.Debug;
 
 /**
  * BasicChecker is a PKIXCertPathChecker that checks the basic information
- * on a PKIX certificate, namely the signature, timestamp, and subject/issuer
+ * on a PKIX certificate, namely the signature, validity, and subject/issuer
  * name chaining.
  *
  * @since       1.4
  * @author      Yassir Elley
  */

@@ -123,11 +123,11 @@
     public Set<String> getSupportedExtensions() {
         return null;
     }
 
     /**
-     * Performs the signature, timestamp, and subject/issuer name chaining
+     * Performs the signature, validity, and subject/issuer name chaining
      * checks on the certificate using its internal state. This method does
      * not remove any critical extensions from the Collection.
      *
      * @param cert the Certificate
      * @param unresolvedCritExts a Collection of the unresolved critical

@@ -139,11 +139,11 @@
         throws CertPathValidatorException
     {
         X509Certificate currCert = (X509Certificate)cert;
 
         if (!sigOnly) {
-            verifyTimestamp(currCert);
+            verifyValidity(currCert);
             verifyNameChaining(currCert);
         }
         verifySignature(currCert);
 
         updateState(currCert);

@@ -175,16 +175,16 @@
         if (debug != null)
             debug.println(msg + " verified.");
     }
 
     /**
-     * Internal method to verify the timestamp on a certificate
+     * Internal method to verify the validity on a certificate
      */
-    private void verifyTimestamp(X509Certificate cert)
+    private void verifyValidity(X509Certificate cert)
         throws CertPathValidatorException
     {
-        String msg = "timestamp";
+        String msg = "validity";
         if (debug != null)
             debug.println("---checking " + msg + ":" + date.toString() + "...");
 
         try {
             cert.checkValidity(date);