[jdk8u-dev] RFR: 8274471: Add support for RSASSA-PSS in OCSP Response

[Alexey Pavlyutkin]

On Tue, 6 Jun 2023 09:33:06 GMT, Alexey Pavlyutkin <duke at openjdk.org> wrote:

> Hi!
> 
> I'd like to backport **[JDK-8274471: Add support for RSASSA-PSS in OCSP Response](https://bugs.openjdk.org/browse/JDK-8274471)** for parity with Oracle JDK.
> 
> The patch from `11u` applied with the following changes (except the path shuffling):
> 
> **`jdk/src/share/classes/sun/security/provider/certpath/OCSP.java`**
> - `URLEncoder.encode()` accepts desired charset as a string, charset constants are not supported in `8`, so import of `java.nio.charset.StandardCharsets` also skipped
> - resolved little baseline conflict
> 
> **`jdk/src/share/classes/sun/security/x509/AlgorithmId.java`**
> - required `public static String getDefaultSigAlgForKey(PrivateKey k)` and `private static String ecStrength (int bitLength)` copied from `11`
> 
> Verification (amd64/20.04): `jdk/test/javax/net/ssl/Stapling/HttpsUrlConnClient.java` with new `RSASSA-PSS` case
> Regression (amd64/20.04): `jdk_security`

Please don't close this, bot.

-------------

PR Comment: https://git.openjdk.org/jdk8u-dev/pull/331#issuecomment-1647360199