RFR: 8296742: Illegal X509 Extension should not be created [v8]

Sean Mullan mullan at openjdk.org
Tue Nov 22 22:17:07 UTC 2022


On Tue, 22 Nov 2022 20:24:23 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> Do you want to add similar checks to the `GeneralSubtree` and `GeneralSubtrees` ctors?
>
> I'll add a check in `GeneralSubtree` to reject a null name. `GeneralSubtrees` is complicated. The intersect and reduce methods make it mutable, so I have to retain all the add and remove methods. Fortunately, its `encode` method still allows an empty tree. If we want to be RFC 5128-compliant and reject the empty tree, I suggest we fix it in a new bug.

Ok.

-------------

PR: https://git.openjdk.org/jdk/pull/11137



More information about the security-dev mailing list