RFR: 8225433: Clarify behavior of PKIXParameters.setRevocationEnabled when PKIXRevocationChecker is used [v2]

Hai-May Chao hchao at openjdk.java.net
Wed Apr 27 13:21:43 UTC 2022


On Wed, 27 Apr 2022 12:48:29 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> This change improves the specification for the case when a `PKIXRevocationChecker` is supplied as one of the `CertPathChecker` parameters. Specifically, it makes it more clear that a `PKIXRevocationChecker` overrides the default revocation checking mechanism of a PKIX service provider, and will be used to check revocation irrespective of the setting of the RevocationEnabled parameter.
>> 
>> Will also file a CSR.
>
> Sean Mullan has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Change wording of "However".

Marked as reviewed by hchao (Committer).

-------------

PR: https://git.openjdk.java.net/jdk/pull/8287



More information about the security-dev mailing list