[jdk17u-dev] RFR: 8274471: Add support for RSASSA-PSS in OCSP Response [v2]

[Martin Doerr]

On Thu, 24 Feb 2022 06:28:54 GMT, Alexey Pavlyutkin <duke at openjdk.java.net> wrote:

>> This one is submitted in place of https://github.com/openjdk/jdk17u/pull/248 that was too late to jdk17u
>> 
>> I'd like to backport JDK-8274471 to jdk17u-dev
>> 
>> The patch fixes internal error upon verification of OCSP Response signed with RSASSA-PSS
>> 
>> The original patch applied with minor changes to src/java.base/share/classes/sun/security/provider/certpath/OCSP.java
>> 
>> - resolved baseline conflict: the original patch was done on top of JDK-8272120: Avoid looking for standard encodings in "java." modules and cannot be applied cleanly although it deletes the changes done against JDK-8272120 (see lines 249-241)
>> - imported few required packages
>> 
>> Verified (20.04 LTS/amd64) with attached [Test8274471.java.zip](https://github.com/openjdk/jdk17u/files/7514663/Test8274471.java.zip). Regression: jdk_security
>
> Alexey Pavlyutkin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   peer-review: removes the delta related to JDK-8272120

Thanks for the update! Good. I think it makes sense to accept it in 11u, too, after it is carefully reviewed and tested.

-------------

Marked as reviewed by mdoerr (Reviewer).

PR: https://git.openjdk.java.net/jdk17u-dev/pull/36