RFR: 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer [v3]

Mark Powers mpowers at openjdk.org
Wed Sep 11 15:03:44 UTC 2024


On Wed, 11 Sep 2024 13:26:27 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Mark Powers has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   comment from Sean
>
> src/java.base/share/classes/sun/security/x509/X509CRLImpl.java line 290:
> 
>> 288:                 GeneralNames names = ciExt.getNames();
>> 289:                 if (!(names.get(0).getName() instanceof X500Name issuerDN)) {
>> 290:                     throw new CRLException("Parsing error: bad X500 issuer");
> 
> Suggest a slight rewording of the error message: "Parsing error: issuer is not an X.500 DN"

Fixed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20528#discussion_r1754862201


More information about the security-dev mailing list