[jdk8u-dev] RFR: 8274471: Add support for RSASSA-PSS in OCSP Response

Alexey Pavlyutkin duke at openjdk.org
Tue Jun 6 09:40:04 UTC 2023


Hi!

I'd like to backport **[JDK-8274471: Add support for RSASSA-PSS in OCSP Response](https://bugs.openjdk.org/browse/JDK-8274471)** for parity with Oracle JDK.

The patch from `11u` applied with the following changes (except the path shuffling):

**`jdk/src/share/classes/sun/security/provider/certpath/OCSP.java`**
- `URLEncoder.encode()` accepts desired charset as a string, charset constants are not supported in `8`, so import of `java.nio.charset.StandardCharsets` also skipped
- resolved little baseline conflict

**`jdk/src/share/classes/sun/security/x509/AlgorithmId.java`**
- required `public static String getDefaultSigAlgForKey(PrivateKey k)` and `private static String ecStrength (int bitLength)` copied from `11`

Verification (amd64/20.04): `jdk/test/javax/net/ssl/Stapling/HttpsUrlConnClient.java` with new `RSASSA-PSS` case
Regression (amd64/20.04): `jdk_security`

-------------

Depends on: https://git.openjdk.org/jdk8u-dev/pull/330

Commit messages:
 - removing unwanted delta
 - Backport f63c4a832a1aea451f47aaf86d5361e970c6a28f

Changes: https://git.openjdk.org/jdk8u-dev/pull/331/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=331&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8274471
  Stats: 213 lines in 9 files changed: 142 ins; 40 del; 31 mod
  Patch: https://git.openjdk.org/jdk8u-dev/pull/331.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/331/head:pull/331

PR: https://git.openjdk.org/jdk8u-dev/pull/331


More information about the jdk8u-dev mailing list