RFR: 8328638: Fallback option for POST-only OCSP requests [v2]

Aleksey Shipilev shade at openjdk.org
Fri Mar 22 14:23:36 UTC 2024


On Fri, 22 Mar 2024 14:04:34 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

>> See the rationale/discussion in the bug. This patch introduces the option that allows to restore pre-[JDK-8179503](https://bugs.openjdk.org/browse/JDK-8179503) behavior. The default behavior does not change. Better suggestions for flag name are welcome.
>> 
>> Additional testing:
>>  - [x] `jdk_security` passes out of the box (includes new test config)
>>  - [x]  `jdk_security` passes with flag override
>>  - [x] Eyeballing `GetPostTests` amended debugging output, `GET`-s are used by default for small requests, `POST`-s are used for everything with flag override
>
> Aleksey Shipilev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Amend CAInterop test

I amended the `CAInterop` test (unfortunately, it fails even without the patch, I think due to [JDK-8324583](https://bugs.openjdk.org/browse/JDK-8324583)), and filed the CSR.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/18408#issuecomment-2015207459



More information about the security-dev mailing list