RFR: 8277976: Break up SEQUENCE in X509Certiticate::getSubjectAlternativeNames and X509Certiticate::getIssuerAlternativeNames in otherName [v3]

Weijun Wang weijun at openjdk.java.net
Fri Feb 11 17:13:49 UTC 2022


On Fri, 11 Feb 2022 14:58:30 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   more precise spec
>
> src/java.base/share/classes/java/security/cert/X509Certificate.java line 594:
> 
>> 592:      * a third entry in the list containing its {@code type-id} in string
>> 593:      * format, and a fourth entry containing the ASN.1 DER encoding of
>> 594:      * its {@code value} without the context-specific constructed tag
> 
> To be very specific, I would add that the 4th entry is a byte array, ex: "and a fourth entry as a byte array containing the ASN.1 DER encoding ..."

Good idea. Fixed and updated the CSR as well.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7167



More information about the security-dev mailing list