[7u6] Request for phase 2 approval for CR 7182500 - OCSP revocation checking fails if OCSP responce does not contain certificates

Edvard Wendelin edvard.wendelin at oracle.com
Wed Jul 11 13:29:54 PDT 2012


Pre-approved pending release team approval. 

/Edvard

On Jul 11, 2012, at 5:40 PM, Vincent Ryan wrote:

> 
> bug report:
>  http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7182500
> 
> webrev:
>  http://cr.openjdk.java.net/~vinnie/7182500/
> 
> code review:
>  http://mail.openjdk.java.net/pipermail/security-dev/2012-July/005138.html
> 
> This regression is a showstopper bug and should be fixed in 7u6 because
> it prevents the successful validation of public key certificates using
> OCSP.
> 
> The fix is a low-risk, isolated, one-line change to an internal class in the sun.security package. I have verified my fix using the testcase identified in the bug report.
> 
> Thanks.




More information about the jdk7u-dev mailing list