Integrated: 8277976: Break up SEQUENCE in X509Certificate::getSubjectAlternativeNames and X509Certificate::getIssuerAlternativeNames in otherName

Weijun Wang weijun at openjdk.java.net
Mon Feb 28 17:04:00 UTC 2022


On Thu, 20 Jan 2022 19:42:22 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> The enhancement adds two extra items in the `getSubjectAlternativeNames()` output for an OtherName.
> 
> It also fix several errors:
> 1. In `OtherName.java`, `nameValue` should be the value inside `CONTEXT [0]` without the tag and length bytes.
> 2. The argument in constructor `extClass.getConstructor(Object.class)` is suspicious. Maybe it meant `byte[]`.

This pull request has now been integrated.

Changeset: 59b3ecc5
Author:    Weijun Wang <weijun at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/59b3ecc591ef6407d6b3f5532ecf889bf61339f0
Stats:     154 lines in 4 files changed: 132 ins; 0 del; 22 mod

8277976: Break up SEQUENCE in X509Certificate::getSubjectAlternativeNames and X509Certificate::getIssuerAlternativeNames in otherName
6776681: Invalid encoding of an OtherName in X509Certificate.getAlternativeNames()

Reviewed-by: mullan

-------------

PR: https://git.openjdk.java.net/jdk/pull/7167



More information about the security-dev mailing list