[jdk11u-dev] RFR: 8179503: Java should support GET OCSP calls

[Goetz Lindenmaier]

On Wed, 31 May 2023 09:13:24 GMT, Alexey Pavlyutkin <duke at openjdk.org> wrote:

> Hi, here is backport of [JDK-8179503](https://bugs.openjdk.org/browse/JDK-8179503) that adds support of GET OCSP calls for parity with Oracle: in spite of the fact that JBS issue is not labelled with any Oracle release, this one is mandatory for [JDK-8274471](https://bugs.openjdk.org/browse/JDK-8274471) released to 11.0.18-oracle
> 
> Original patch applied with the only change
> 
> **`src/java.base/share/classes/sun/security/provider/certpath/OCSP.java`**
> - resolved baseline conflict related to revokation checking
> 
> Verification (amd64/20.04): newly added `test/jdk/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java`
> Regression  (amd64/20.04): `jdk_security`
> 
> @TheRealMDoerr I raised this one instead of already reviewed https://github.com/openjdk/jdk11u-dev/pull/847. Please check it out

Hi, ok, I am waiting for PR 1918 being reviewed. 
I ran 1917, 1918 and 1920 through our testing. I had to grep the patches and do some simple resolves. Unfortunately, 1918 does not compile:
java.base/share/classes/sun/security/x509/X509CertImpl.java:1087: error: unreported exception IOException; must be caught or declared to be thrown
        return algId == null ? null : algId.getEncodedParams();
Actually there was a row of other patches in the nightbuild, but after removing these three it worked.

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/1917#issuecomment-1765192818