[jdk8u-dev] RFR: 8179503: Java should support GET OCSP calls

Alexey Pavlyutkin duke at openjdk.org
Mon Jun 5 13:36:21 UTC 2023


Hi!

I would like to backport **[JDK-8179503: Java should support GET OCSP calls](https://bugs.openjdk.org/browse/JDK-8179503)** for parity with Oracle JDK.

Except the path suffling the following changes were done to original patch:

**`jdk/src/share/classes/sun/security/provider/certpath/OCSP.java`**
- still reads the response piece by piece using `InputStream.read()` method because `IOUtils.readExactlyNBytes()` is not available

**`jdk/test/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java`**
- unsupported `List.of()`, `Set.of()`, `Map.of()` replaced with equivalents
- `algorithm` parameter dropped from instantiation `PKCS8EncodedKeySpec`

**`jdk/test/javax/net/ssl/templates/SSLSocketTemplate.java`**
- required `public static enum SSLSocketTemplate.Cert` copied from `11u`

Verification (amd64/20.04LTS): newly added `jdk/test/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java`
Regression (amd64/20.04LTS): `jdk_security`

-------------

Commit messages:
 - Backport f5ee356540d7aa4a7663c0d5d74f5fdb0726b426

Changes: https://git.openjdk.org/jdk8u-dev/pull/330/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=330&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8179503
  Stats: 902 lines in 4 files changed: 858 ins; 27 del; 17 mod
  Patch: https://git.openjdk.org/jdk8u-dev/pull/330.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/330/head:pull/330

PR: https://git.openjdk.org/jdk8u-dev/pull/330


More information about the jdk8u-dev mailing list