RFR: 8256895: Add support for RFC 8954: Online Certificate Status Protocol (OCSP) Nonce Extension [v6]

Wed Jan 20 21:42:53 UTC 2021

On Wed, 20 Jan 2021 21:37:10 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> This enhancement adds support for the nonce extension in OCSP request extensions by system property jdk.security.certpath.ocspNonce.
>> 
>> Please review the CSR at:
>> https://bugs.openjdk.java.net/browse/JDK-8257766
>
> Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Change to save memory by List.of

src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java line 749:

> 747:                 }
> 748: 
> 749:                 List<Extension> tmpExtensions = Collections.<Extension>emptyList();

One other comment - I think you can just set this to null.

-------------

PR: https://git.openjdk.java.net/jdk/pull/2039