RFR: 8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks

Baesken, Matthias matthias.baesken at sap.com
Thu Jan 30 13:27:56 UTC 2020


Hi Christoph, that sounds like a good idea .

New webrev :

http://cr.openjdk.java.net/~mbaesken/webrevs/8237962.3/

Thanks, Matthias



> Hi Matthias,
> 
> I'm wondering whether we should add cpve as cause of the
> RuntimeException in
> test/jdk/security/infra/java/security/cert/CertPathValidator/certification/Val
> idatePathWithParams.java, line 177, instead of printing it out explicitly?
> 
> Like:
> throw new RuntimeException(
>                         "TEST FAILED: couldn't determine EE certificate status", cvpe);
> 
> Best regards
> Christoph
> 
> > -----Original Message-----
> > From: Baesken, Matthias <matthias.baesken at sap.com>
> > Sent: Donnerstag, 30. Januar 2020 09:25
> > To: Sean Mullan <sean.mullan at oracle.com>; security-
> > dev at openjdk.java.net
> > Cc: Langer, Christoph <christoph.langer at sap.com>
> > Subject: RE: RFR: 8237962: give better error output for invalid OCSP
> response
> > intervals in CertPathValidator checks
> >
> > Thanks, may I have a second review ?
> >
> > Best regards, Matthias
> >
> >
> >
> > > Looks good.
> > >
> > > Thanks,
> > > Sean
> > >
> > > On 1/29/20 4:20 AM, Baesken, Matthias wrote:
> > > >
> > > > Hi Sean, new webrev :
> > > >
> > > >
> > > > http://cr.openjdk.java.net/~mbaesken/webrevs/8237962.1/
> > > >
> > > >
> > > > Best Regards, Matthias
> > > >



More information about the security-dev mailing list