RFR: 8296742: Illegal X509 Extension should not be created [v8]
Sean Mullan
mullan at openjdk.org
Tue Nov 22 22:17:07 UTC 2022
On Tue, 22 Nov 2022 20:24:23 GMT, Weijun Wang <weijun at openjdk.org> wrote:
>> Do you want to add similar checks to the `GeneralSubtree` and `GeneralSubtrees` ctors?
>
> I'll add a check in `GeneralSubtree` to reject a null name. `GeneralSubtrees` is complicated. The intersect and reduce methods make it mutable, so I have to retain all the add and remove methods. Fortunately, its `encode` method still allows an empty tree. If we want to be RFC 5128-compliant and reject the empty tree, I suggest we fix it in a new bug.
Ok.
-------------
PR: https://git.openjdk.org/jdk/pull/11137
More information about the security-dev
mailing list