RFR: 8225433: Clarify behavior of PKIXParameters.setRevocationEnabled when PKIXRevocationChecker is used

Sean Mullan mullan at openjdk.java.net
Tue Apr 26 20:27:43 UTC 2022


On Mon, 18 Apr 2022 13:35:25 GMT, Sean Mullan <mullan at openjdk.org> wrote:

> This change improves the specification for the case when a `PKIXRevocationChecker` is supplied as one of the `CertPathChecker` parameters. Specifically, it makes it more clear that a `PKIXRevocationChecker` overrides the default revocation checking mechanism of a PKIX service provider, and will be used to check revocation irrespective of the setting of the RevocationEnabled parameter.
> 
> Will also file a CSR.

ping ...

CSR also ready for review at https://bugs.openjdk.java.net/browse/JDK-8285262

-------------

PR: https://git.openjdk.java.net/jdk/pull/8287



More information about the security-dev mailing list