[jdk17u-dev] RFR: 8274471: Add support for RSASSA-PSS in OCSP Response [v2]

Alexey Pavlyutkin duke at openjdk.java.net
Thu Feb 24 06:28:54 UTC 2022


> This one is submitted in place of https://github.com/openjdk/jdk17u/pull/248 that was too late to jdk17u
> 
> I'd like to backport JDK-8274471 to jdk17u-dev
> 
> The patch fixes internal error upon verification of OCSP Response signed with RSASSA-PSS
> 
> The original patch applied with minor changes to src/java.base/share/classes/sun/security/provider/certpath/OCSP.java
> 
> - resolved baseline conflict: the original patch was done on top of JDK-8272120: Avoid looking for standard encodings in "java." modules and cannot be applied cleanly although it deletes the changes done against JDK-8272120 (see lines 249-241)
> - imported few required packages
> 
> Verified (20.04 LTS/amd64) with attached [Test8274471.java.zip](https://github.com/openjdk/jdk17u/files/7514663/Test8274471.java.zip). Regression: jdk_security

Alexey Pavlyutkin has updated the pull request incrementally with one additional commit since the last revision:

  peer-review: removes the delta related to JDK-8272120

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk17u-dev/pull/36/files
  - new: https://git.openjdk.java.net/jdk17u-dev/pull/36/files/ea686fe7..e22864b7

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk17u-dev&pr=36&range=01
 - incr: https://webrevs.openjdk.java.net/?repo=jdk17u-dev&pr=36&range=00-01

  Stats: 4 lines in 1 file changed: 0 ins; 2 del; 2 mod
  Patch: https://git.openjdk.java.net/jdk17u-dev/pull/36.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk17u-dev pull/36/head:pull/36

PR: https://git.openjdk.java.net/jdk17u-dev/pull/36


More information about the jdk-updates-dev mailing list