[jdk17u-dev] RFR: 8328638: Fallback option for POST-only OCSP requests
Aleksey Shipilev
shade at openjdk.org
Tue Apr 2 10:44:21 UTC 2024
Improves JDK OCSP compatibility with some real world OCSP responders. Starts to be a problem since JDK 17 introduced GET OCSP requests. The default behavior is not changed.
The backports are almost clean, I just had to add the import for `Locale` and `Debug` in one of the files. `Locale` is added in mainline by [JDK-8312443](https://bugs.openjdk.org/browse/JDK-8312443), which I do not want to backport at the moment, as it changes existing security code. `Debug` is added by [JDK-8179502](https://bugs.openjdk.org/browse/JDK-8179502), which is also not amenable for easy backporting.
Additional testing:
- [x] `jdk_security` pass, includes new test cases
-------------
Commit messages:
- Backport 4a14cba2f1632c5cb91e37a07638ea6d8ad4ec00
- Fix for missing APIs
- Backport 614db2ea9e10346475eef34629eab54878aa482d
Changes: https://git.openjdk.org/jdk17u-dev/pull/2338/files
Webrev: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=2338&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8328638
Stats: 130 lines in 5 files changed: 125 ins; 0 del; 5 mod
Patch: https://git.openjdk.org/jdk17u-dev/pull/2338.diff
Fetch: git fetch https://git.openjdk.org/jdk17u-dev.git pull/2338/head:pull/2338
PR: https://git.openjdk.org/jdk17u-dev/pull/2338
More information about the jdk-updates-dev
mailing list