[jdk17u-dev] Integrated: 8274471: Add support for RSASSA-PSS in OCSP Response

[Alexey Pavlyutkin]

On Fri, 24 Dec 2021 17:23:26 GMT, Alexey Pavlyutkin <duke at openjdk.java.net> wrote:

> This one is submitted in place of https://github.com/openjdk/jdk17u/pull/248 that was too late to jdk17u
> 
> I'd like to backport JDK-8274471 to jdk17u-dev
> 
> The patch fixes internal error upon verification of OCSP Response signed with RSASSA-PSS
> 
> The original patch applied with minor changes to src/java.base/share/classes/sun/security/provider/certpath/OCSP.java
> 
> - resolved baseline conflict: the original patch was done on top of JDK-8272120: Avoid looking for standard encodings in "java." modules and cannot be applied cleanly although it deletes the changes done against JDK-8272120 (see lines 249-241)
> - imported few required packages
> 
> Verified (20.04 LTS/amd64) with attached [Test8274471.java.zip](https://github.com/openjdk/jdk17u/files/7514663/Test8274471.java.zip). Regression: jdk_security

This pull request has now been integrated.

Changeset: 8e13d2f3
Author:    Alexey Pavlyutkin <apavlyutkin at azul.com>
Committer: Goetz Lindenmaier <goetz at openjdk.org>
URL:       https://git.openjdk.java.net/jdk17u-dev/commit/8e13d2f3e79b0595b97300ac7090b50be6d295b6
Stats:     111 lines in 9 files changed: 26 ins; 45 del; 40 mod

8274471: Add support for RSASSA-PSS in OCSP Response

Reviewed-by: mdoerr, goetz
Backport-of: f63c4a832a1aea451f47aaf86d5361e970c6a28f

-------------

PR: https://git.openjdk.java.net/jdk17u-dev/pull/36