/hg/release/icedtea-web-1.1: Fix PR769: IcedTea-Web does not wor...
dbhole at icedtea.classpath.org
dbhole at icedtea.classpath.org
Tue Aug 23 13:38:21 PDT 2011
changeset 494140bdce62 in /hg/release/icedtea-web-1.1
details: http://icedtea.classpath.org/hg/release/icedtea-web-1.1?cmd=changeset;node=494140bdce62
author: Deepak Bhole <dbhole at redhat.com>
date: Tue Aug 23 16:33:32 2011 -0400
Fix PR769: IcedTea-Web does not work with some ssl sites with
OpenJDK7
diffstat:
ChangeLog | 7 +++
NEWS | 1 +
netx/net/sourceforge/jnlp/security/VariableX509TrustManager.java | 20 ++++++----
3 files changed, 20 insertions(+), 8 deletions(-)
diffs (57 lines):
diff -r 25dc7d8cb757 -r 494140bdce62 ChangeLog
--- a/ChangeLog Tue Aug 23 12:52:10 2011 -0400
+++ b/ChangeLog Tue Aug 23 16:33:32 2011 -0400
@@ -1,3 +1,10 @@
+2011-08-23 Deepak Bhole <dbhole at redhat.com>
+
+ PR769: IcedTea-Web plugin does not work with some ssl sites with OpenJDK7
+ * netx/net/sourceforge/jnlp/security/VariableX509TrustManager.java
+ (checkServerTrusted): Account for a null hostname that the
+ overloaded implementation may pass.
+
2011-08-23 Omair Majid <omajid at redhat.com>
* Makefile.am: Remove JRE. Replace uses with SYSTEM_JRE_DIR instead. Also
diff -r 25dc7d8cb757 -r 494140bdce62 NEWS
--- a/NEWS Tue Aug 23 12:52:10 2011 -0400
+++ b/NEWS Tue Aug 23 16:33:32 2011 -0400
@@ -13,6 +13,7 @@
- PR749: sun.applet.PluginStreamHandler#handleMessage(String) really slow
Common
- PR768: Signed applets/Web Start apps don't work with OpenJDK7 and up
+ - PR769: IcedTea-Web does not work with some ssl sites with OpenJDK7
New in release 1.1.1 (2011-07-20):
* Security updates:
diff -r 25dc7d8cb757 -r 494140bdce62 netx/net/sourceforge/jnlp/security/VariableX509TrustManager.java
--- a/netx/net/sourceforge/jnlp/security/VariableX509TrustManager.java Tue Aug 23 12:52:10 2011 -0400
+++ b/netx/net/sourceforge/jnlp/security/VariableX509TrustManager.java Tue Aug 23 16:33:32 2011 -0400
@@ -224,16 +224,20 @@
// need to prompt the user
if (!isExplicitlyTrusted(chain, authType)) {
- try {
- HostnameChecker checker = HostnameChecker
- .getInstance(HostnameChecker.TYPE_TLS);
+ if (hostName == null) {
+ CNMatched = false;
+ } else {
+ try {
+ HostnameChecker checker = HostnameChecker
+ .getInstance(HostnameChecker.TYPE_TLS);
- checker.match(hostName, chain[0]); // only need to match @ 0 for
- // CN
+ checker.match(hostName, chain[0]); // only need to match @ 0 for
+ // CN
- } catch (CertificateException e) {
- CNMatched = false;
- ce = e;
+ } catch (CertificateException e) {
+ CNMatched = false;
+ ce = e;
+ }
}
}
More information about the distro-pkg-dev
mailing list