RFR [13] JDK-4919790 : Errors in alert ssl message does not reflect the actual certificate status
Sean Mullan
sean.mullan at oracle.com
Thu Feb 14 19:49:38 UTC 2019
On 2/14/19 2:20 PM, Jamil Nimeh wrote:
> Whoops, forgot to look at RFC 6961. Over there, both revoked and
> structural failures are both supposed to yield
> bad_certificate_status_response alerts. I think what we have is
> conformant with the spec.
Ok, thanks for checking, let's leave the code as is.
--Sean
More information about the security-dev
mailing list