dealt with expiring certificate in test

bcgit · Feb 10, 2025 · 9706d9a · 9706d9a
1 parent f13def6
commit 9706d9a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/pkix/src/test/java/org/bouncycastle/cms/test/GOSTR3410_2012_256CmsSignVerifyDetached.java b/pkix/src/test/java/org/bouncycastle/cms/test/GOSTR3410_2012_256CmsSignVerifyDetached.java
@@ -9,6 +9,7 @@
 import java.security.cert.X509Certificate;
 import java.util.ArrayList;
 import java.util.Collection;
+import java.util.Date;
 import java.util.HashSet;
 import java.util.List;
 
@@ -121,9 +122,13 @@ private static boolean verifyDetached(byte[] data, byte[] detachedCms,
 
                     // Validate signer's certificate chain
                     X509CertSelector constraints = new X509CertSelector();
-                    constraints.setCertificate(getX509Certificate(signerCert));
+                    X509Certificate x509Certificate = getX509Certificate(signerCert);
+                    constraints.setCertificate(x509Certificate);
+
                     PKIXBuilderParameters params = new PKIXBuilderParameters(trustAnchors, constraints);
 
+                    params.setDate(new Date(x509Certificate.getNotAfter().getTime() - 5000L));
+
                     JcaCertStoreBuilder certStoreBuilder = new JcaCertStoreBuilder();
                     certStoreBuilder.addCertificate(signerCert);