On Thu, 30 Mar 2023 18:42:21 GMT, Victor Rudometov <vrudo...@openjdk.org> wrote:
> Isn't it required for all certificates in the chain to be valid at the > current date/time? For TLS, yes. For signed code, no as long as the code was previously timestamped and that timestamp was within the validity period of all of the certificates in the chain. ------------- PR Comment: https://git.openjdk.org/jdk/pull/13237#issuecomment-1490784302