<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hello,<br>
<br>
Please review this fix for 9.<br>
<br>
Certpath validation fails to load certs and CRLs if AIA and CRLDP
extensions point to LDAP resources. This happens because
LDAPCertStore accepts only instances of LDAPCertStoreParameters and
URICertStoreParameters classes, but
sun.security.provider.certpath.URICertStore uses an inner static
URICertStoreParameters class. Please see details in the bug.<br>
<br>
This fix removes URICertStore.URICertStoreParameters class, and
updates URICertStore and DistributionPointFetcher to use new
<meta http-equiv="content-type" content="text/html; charset=utf-8">
java.security.cert.URICertStoreParameters class.<br>
<br>
A regression test starts a local name service which logs requested
host names. The test checks that host names from AIA and CRLDP
extensions were loaded and requested to resolve during certpath
validation.<br>
<br>
Bug: <a class="moz-txt-link-freetext" href="https://bugs.openjdk.java.net/browse/JDK-8134708">https://bugs.openjdk.java.net/browse/JDK-8134708</a><br>
Webrev: <a class="moz-txt-link-freetext" href="http://cr.openjdk.java.net/~asmotrak/8134708/webrev.01/">http://cr.openjdk.java.net/~asmotrak/8134708/webrev.01/</a><br>
<br>
Artem<br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</body>
</html>