RFR: 8311546: Certificate name constraints improperly validated with leading period [v2]

Sean Mullan mullan at openjdk.org
Tue Oct 31 14:15:41 UTC 2023


On Fri, 27 Oct 2023 15:07:55 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Ben Perez has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Updated documentation, minor fixes in test
>
> test/jdk/sun/security/x509/DNSName/LeadingPeriod.java line 82:
> 
>> 80:         // disable CRL checker
>> 81:         System.setProperty("com.sun.security.enableCRLDP", "false");
>> 82: 
> 
> You should not need to set this property if revocation is disabled.

You may have missed this comment, you can also remove lines 77-78.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/16295#discussion_r1377647382



More information about the security-dev mailing list