8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts.

Sean Mullan sean.mullan at oracle.com
Tue Oct 8 11:19:06 UTC 2024


Hi Hempushpa,

I'm not actively involved in the OpenJDK 17u Project, so I'm not the 
best person to review this. You might want to ask one of the JDK 17u 
Project Maintainers [1] who would be a suitable person to review this 
backport.

Thanks,
Sean

[1] https://wiki.openjdk.org/display/JDKUpdates/JDK+17u

On 10/8/24 2:49 AM, Hempushpa Sahu wrote:
> Hi Sean,
> 
> There is an update from @Jamil Nimeh on the PR (https://github.com/openjdk/jdk17u-dev/pull/2747), and he doesn't have reviewer rights. So, could you please help us here to review the PR.
> We are really looking forward to getting this backport done, as our customer is waiting for the fix.
> 
> Thanks,
> Hempushpa Sahu
> 
> -----Original Message-----
> From: Sean Mullan <sean.mullan at oracle.com>
> Sent: Thursday, September 19, 2024 6:05 PM
> To: Hempushpa Sahu <Hempushpa.Sahu at ibm.com>; security-dev at openjdk.org
> Cc: Syed Moinudeen1 <smoinud1 at in.ibm.com>
> Subject: [EXTERNAL] Re: 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts.
> 
> Hi,
> 
> This list is primarily for discussing and reviewing security related topics (bugs, enhancements, etc) for the JDK mainline (https://github.com/openjdk/jdk/ ). Please use the jdk-updates-dev list for issues that relate to previous JDK releases.
> 
> I see that the assignee has already asked for a review a couple of days ago, so hopefully this will move forward soon.
> 
> --Sean
> 
> On 9/19/24 3:23 AM, Hempushpa Sahu wrote:
>> Hi Team,
>>
>> We are working on a case, and the customer is awaiting the fix. To
>> deliver the fix, this PR
>> INVALID URI REMOVED
>> k_jdk17u-2Ddev_pull_2747&d=DwIDaQ&c=BSDicqBQBDjDI9RkVyTcHQ&r=E-NNzCMrZ
>> leBploUPg81ekUNFNM-G7U74D9ne2u5_vQ&m=Oe3i8D9aSd1OQ4nDnX83NxHGWSbJunmxq
>> b0NJdJ4TbgNlpS-vJGSFQ1L1720BMQD&s=-aY2XSsvktwv-osX2Kd2GcuD2XpQXRupS3Yl
>> tTSqNuY&e=
>> <INVALID URI REMOVED
>> dk_jdk17u-2Ddev_pull_2747&d=DwIDaQ&c=BSDicqBQBDjDI9RkVyTcHQ&r=E-NNzCMr
>> ZleBploUPg81ekUNFNM-G7U74D9ne2u5_vQ&m=Oe3i8D9aSd1OQ4nDnX83NxHGWSbJunmx
>> qb0NJdJ4TbgNlpS-vJGSFQ1L1720BMQD&s=-aY2XSsvktwv-osX2Kd2GcuD2XpQXRupS3YltTSqNuY&e= > needs to be merged. We requested an update on the review progress on August 20, 2024, but no progress has been made since then. It has been over a month, and we are still waiting for the PR to be reviewed and merged.
>>
>> Can anyone please assist us in moving forward with the review process
>> by letting us know who can review the code?
>>
>> Thanks.
>>
> 



More information about the security-dev mailing list