RFR: 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer [v3]

Sean Mullan mullan at openjdk.org
Wed Sep 11 13:29:08 UTC 2024


On Tue, 13 Aug 2024 15:30:09 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> https://bugs.openjdk.org/browse/JDK-8336665
>
> Mark Powers has updated the pull request incrementally with one additional commit since the last revision:
> 
>   comment from Sean

src/java.base/share/classes/sun/security/x509/X509CRLImpl.java line 290:

> 288:                 GeneralNames names = ciExt.getNames();
> 289:                 if (!(names.get(0).getName() instanceof X500Name issuerDN)) {
> 290:                     throw new CRLException("Parsing error: bad X500 issuer");

Suggest a slight rewording of the error message: "Parsing error: issuer is not an X.500 DN"

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20528#discussion_r1754533188


More information about the security-dev mailing list