[jdk17u-dev] RFR: 8311546: Certificate name constraints improperly validated with leading period [v2]

Fri Jan 17 10:00:42 UTC 2025

On Thu, 16 Jan 2025 11:03:11 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

>> Backporting this due to wider customer interest in aligning JDK behavior with other SSL implementations. Both patches apply cleanly. First patch does the fix. Second patch fixes the test.
>> 
>> Additional testing:
>>  - [x] macos-aarch64-server-release, new test fails without the change and passes with it
>>  - [x] macos-aarch64-server-release, `sun/security/x509/`
>>  - [x] linux-x86_64-server-release, `jdk_security`
>
> Aleksey Shipilev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Backport a6be9076351b591cbc0860b1ba8f3c56319f4ffe

Still good. Thanks.

-------------

Marked as reviewed by simonis (Reviewer).

PR Review: https://git.openjdk.org/jdk17u-dev/pull/3149#pullrequestreview-2558434305