dealt with expiring certificate in test

Author: dghgit

pkix/src/test/java/org/bouncycastle/cms/test/GOSTR3410_2012_256CmsSignVerifyDetached.java

@@ -9,6 +9,7 @@
 import java.security.cert.X509Certificate;
 import java.util.ArrayList;
 import java.util.Collection;
+import java.util.Date;
 import java.util.HashSet;
 import java.util.List;
 
@@ -121,9 +122,13 @@ private static boolean verifyDetached(byte[] data, byte[] detachedCms,
 
                     // Validate signer's certificate chain
                     X509CertSelector constraints = new X509CertSelector();
-                    constraints.setCertificate(getX509Certificate(signerCert));
+                    X509Certificate x509Certificate = getX509Certificate(signerCert);
+                    constraints.setCertificate(x509Certificate);
+
                     PKIXBuilderParameters params = new PKIXBuilderParameters(trustAnchors, constraints);
 
+                    params.setDate(new Date(x509Certificate.getNotAfter().getTime() - 5000L));
+                    
                     JcaCertStoreBuilder certStoreBuilder = new JcaCertStoreBuilder();
                     certStoreBuilder.addCertificate(signerCert);