[jdk8u-dev] RFR: 8179503: Java should support GET OCSP calls

[Paul Hohensee]

On Mon, 5 Jun 2023 13:25:49 GMT, Alexey Pavlyutkin <duke at openjdk.org> wrote:

> Hi!
> 
> I would like to backport **[JDK-8179503: Java should support GET OCSP calls](https://bugs.openjdk.org/browse/JDK-8179503)** for parity with Oracle JDK.
> 
> Except the path suffling the following changes were done to original patch:
> 
> **`jdk/src/share/classes/sun/security/provider/certpath/OCSP.java`**
> - still reads the response piece by piece using `InputStream.read()` method because `IOUtils.readExactlyNBytes()` is not available
> 
> **`jdk/test/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java`**
> - unsupported `List.of()`, `Set.of()`, `Map.of()` replaced with equivalents
> - `algorithm` parameter dropped from instantiation `PKCS8EncodedKeySpec`
> 
> **`jdk/test/javax/net/ssl/templates/SSLSocketTemplate.java`**
> - required `public static enum SSLSocketTemplate.Cert` copied from `11u`
> 
> Verification (amd64/20.04LTS): newly added `jdk/test/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java`
> Regression (amd64/20.04LTS): `jdk_security`

Lgtm.

-------------

Marked as reviewed by phh (Reviewer).

PR Review: https://git.openjdk.org/jdk8u-dev/pull/330#pullrequestreview-1463215651