[jdk17u-dev] RFR: 8328638: Fallback option for POST-only OCSP requests

[Sergey Bylokhov]

On Wed, 27 Mar 2024 15:45:47 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

> Improves JDK OCSP compatibility with some real world OCSP responders. Starts to be a problem since JDK 17 introduced GET OCSP requests. The default behavior is not changed.
> 
> The backports are almost clean, I just had to add the import for `Locale` and `Debug` in one of the files. `Locale` is added in mainline by [JDK-8312443](https://bugs.openjdk.org/browse/JDK-8312443), which I do not want to backport at the moment, as it changes existing security code. `Debug` is added by [JDK-8179502](https://bugs.openjdk.org/browse/JDK-8179502), which is also not amenable for easy backporting.
> 
> Additional testing:
>  - [x] `jdk_security` pass, includes new test cases

Marked as reviewed by serb (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk17u-dev/pull/2338#pullrequestreview-1974942913