code review request, CR 7166570: JSSE certificate validation has started to fail for certificate chains

Bradford Wetmore bradford.wetmore at oracle.com
Sun May 6 05:32:27 UTC 2012


Hi Xuelei,

Can you put these CR requests on cr.openjdk.java.net?  I can't see them 
from home.

Brad

On 5/5/2012 8:06 AM, Xuelei Fan wrote:
> The webrev URL should be:
> http://javaweb.us.oracle.com/~xufan/bugbios/7166570/webrev.00/
>
> Xuelei
>
> On 5/5/2012 9:38 PM, Xuelei Fan wrote:
>> Hi,
>>
>> Please review the fix for JSSE certification path validation issue.
>>
>> webrev: http://javaweb.us.oracle.com/~xufan/bugbios/7166570/webrev/
>>
>> Cause of the issue: in SimpleValiadtor, the count pathLenConstraint was
>> not calculated properly, the non-intermediate certificate (end-entity
>> certificate) was count in.
>>
>> Thanks,
>> Xuelei
>



More information about the security-dev mailing list