RFR: 8256895: Add support for RFC 8954: Online Certificate Status Protocol… [v2]

Rajan Halade rhalade at openjdk.java.net
Tue Jan 12 20:14:01 UTC 2021


On Tue, 12 Jan 2021 19:18:18 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> This enhancement adds support for the nonce extension in OCSP request extensions by system property jdk.security.certpath.ocspNonce.
>> 
>> Please review the CSR at:
>> https://bugs.openjdk.java.net/browse/JDK-8257766
>
> Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:
> 
>   update to use List.of() and typo changes

test/jdk/security/infra/java/security/cert/CertPathValidator/certification/SSLCA.java line 50:

> 48:     public static void main(String[] args) throws Exception {
> 49: 
> 50:         System.setProperty("jdk.security.certpath.ocspNonce", "true");

Trying to understand this change - why do we need this change and only in couple of tests? Did these test fail with your change?

-------------

PR: https://git.openjdk.java.net/jdk/pull/2039



More information about the security-dev mailing list