RFR: 8328638: Fallback option for POST-only OCSP requests [v3]

Aleksey Shipilev shade at openjdk.org
Fri Mar 22 14:23:36 UTC 2024


> See the rationale/discussion in the bug. This patch introduces the option that allows to restore pre-[JDK-8179503](https://bugs.openjdk.org/browse/JDK-8179503) behavior. The default behavior does not change. Better suggestions for flag name are welcome.
> 
> Additional testing:
>  - [x] `jdk_security` passes out of the box (includes new test config)
>  - [x]  `jdk_security` passes with flag override
>  - [x] Eyeballing `GetPostTests` amended debugging output, `GET`-s are used by default for small requests, `POST`-s are used for everything with flag override

Aleksey Shipilev has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:

 - Merge branch 'master' into JDK-8328638-ocsp-post
 - Amend CAInterop test
 - Fix

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/18408/files
  - new: https://git.openjdk.org/jdk/pull/18408/files/ddf989e0..0e239341

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=18408&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=18408&range=01-02

  Stats: 52703 lines in 2267 files changed: 7683 ins; 3769 del; 41251 mod
  Patch: https://git.openjdk.org/jdk/pull/18408.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/18408/head:pull/18408

PR: https://git.openjdk.org/jdk/pull/18408



More information about the security-dev mailing list