Code review of JDK-8072385, Only the first DNSName entry is checked for endpoint identification

Xuelei Fan xuelei.fan at oracle.com
Tue Mar 10 00:24:11 UTC 2015


Ping ...

wbrev: http://cr.openjdk.java.net/~xuelei/8072385/webrev.00/

On 3/4/2015 10:51 PM, Xuelei Fan wrote:
> Hi,
> 
> Please review the fix for:
>    https://bugs.openjdk.java.net/browse/JDK-8072385
> 
> In SunJSSE implementation, during endpoint identification, there is a
> bug in SubjectAlternativeName matching that only the fist DNSName are
> checked. As may impact some business where host-name alias are used.
> 
> The patch is attached.
> 
> Thanks,
> Xuelei
> 



More information about the security-dev mailing list