RFR: 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer [v6]

Sean Mullan mullan at openjdk.org
Mon Oct 21 17:32:18 UTC 2024


On Mon, 21 Oct 2024 17:12:04 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> https://bugs.openjdk.org/browse/JDK-8336665
>
> Mark Powers has updated the pull request incrementally with one additional commit since the last revision:
> 
>   more precise exception message

test/jdk/sun/security/x509/X509CRLImpl/UnexpectedCCE.java line 46:

> 44:         // "class sun.security.x509.OIDName cannot be cast
> 45:         // to class sun.security.x509.X500Name"
> 46:         byte[] encoded_1 = Base64.getDecoder().decode("""

Could you add some comments before this line and line 59 as to what is in the CRL that makes the format invalid? (Ex: This CRL contains a CertificateIssuerExtension that is not compliant with RFC 5280 because it does not contain a DN)

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20528#discussion_r1809221474


More information about the security-dev mailing list