[7u6] Request for phase 2 approval for CR 7182500 - OCSP revocation checking fails if OCSP responce does not contain certificates
Vincent Ryan
vincent.x.ryan at oracle.com
Wed Jul 11 08:40:41 PDT 2012
bug report:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7182500
webrev:
http://cr.openjdk.java.net/~vinnie/7182500/
code review:
http://mail.openjdk.java.net/pipermail/security-dev/2012-July/005138.html
This regression is a showstopper bug and should be fixed in 7u6 because
it prevents the successful validation of public key certificates using
OCSP.
The fix is a low-risk, isolated, one-line change to an internal class in
the sun.security package. I have verified my fix using the testcase
identified in the bug report.
Thanks.
More information about the jdk7u-dev
mailing list