[7u6] Request for phase 2 approval for CR 7182500 - OCSP revocation checking fails if OCSP responce does not contain certificates

Vincent Ryan vincent.x.ryan at oracle.com
Wed Jul 11 08:40:41 PDT 2012


bug report:
   http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7182500

webrev:
   http://cr.openjdk.java.net/~vinnie/7182500/

code review:
   http://mail.openjdk.java.net/pipermail/security-dev/2012-July/005138.html

This regression is a showstopper bug and should be fixed in 7u6 because
it prevents the successful validation of public key certificates using
OCSP.

The fix is a low-risk, isolated, one-line change to an internal class in 
the sun.security package. I have verified my fix using the testcase 
identified in the bug report.

Thanks.



More information about the jdk7u-dev mailing list