RFR: 8277976: Break up SEQUENCE in X509Certificate::getSubjectAlternativeNames and X509Certificate::getIssuerAlternativeNames in otherName [v5]

Weijun Wang weijun at openjdk.java.net
Fri Feb 18 15:08:10 UTC 2022


On Fri, 18 Feb 2022 06:56:04 GMT, Michael Osipov <duke at openjdk.java.net> wrote:

>> Yes. I don't want to let the method fail. Since `instanceof String` should be called anyway the caller can decide how to fail.
>
> So you leave it to the user to read the ASN.1 value and fail if the encoding is incorrect instead of throwing a `Ceritificate..Exception` although other GeneralNames do?

I want to minimize behavior change and I'm leaving them to notice there's no string there and fail.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7167



More information about the security-dev mailing list