From 79419cbc95a937a7a1387440717f58d0a643375e Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Tue, 20 Jan 2026 14:58:27 +0100 Subject: [PATCH] Skip the Cavium root validity test until March 19th, 2026 There's no new Cavium root certificate available yet. Bumping the date to skip this check with about 2 months for now. More info at https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/liquidsecurity-certificate.html --- kms/cloudkms/attestation_test.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/kms/cloudkms/attestation_test.go b/kms/cloudkms/attestation_test.go index 97991f8f..9a791ab1 100644 --- a/kms/cloudkms/attestation_test.go +++ b/kms/cloudkms/attestation_test.go @@ -746,8 +746,9 @@ func Test_getKeyType(t *testing.T) { // this package. The current certificate expires on November 16, 2025. We will // need to change it once Marvell changes it. func TestValidateCaviumRoot(t *testing.T) { - if !time.Now().After(time.Unix(1768460400, 0)) { // retrigger test after Thu Jan 15 2026 07:00:00 - t.Skip("skipping expired Cavium root test until Thu Jan 15 2026 07:00:00 GMT") + d := time.Date(2026, 3, 19, 7, 0, 0, 0, time.UTC) + if !time.Now().After(d) { + t.Skipf("skipping expired Cavium root test until %s", d.Format(time.RFC1123)) } root, err := pemutil.ParseCertificate([]byte(caviumRoot))