RFR: 8274471: Verification of OCSP Response signed with RSASSA-PSS fails [v3]

Weijun Wang weijun at openjdk.java.net
Fri Oct 1 14:43:24 UTC 2021


> Extra parameters need to be set for RSASSA-PSS signatures. We already have a helper method for that.
> 
> Some other cleanups:
> 1. When using GET for OCSP, make sure no double slash.
> 2. Several throws clauses are not necessary.
> 
> No regression test. OCSP needs to access an external server.

Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:

  verifier should not use automatically derived parameters fails

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/5778/files
  - new: https://git.openjdk.java.net/jdk/pull/5778/files/ae58fe45..f6ba88a9

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=5778&range=02
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=5778&range=01-02

  Stats: 11 lines in 1 file changed: 0 ins; 5 del; 6 mod
  Patch: https://git.openjdk.java.net/jdk/pull/5778.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/5778/head:pull/5778

PR: https://git.openjdk.java.net/jdk/pull/5778



More information about the security-dev mailing list