RFR: 8274330: Incorrect encoding of the DistributionPointName object in IssuingDistributionPointExtension

Weijun Wang weijun at openjdk.java.net
Mon Sep 27 09:47:43 UTC 2021


`DistributionPointName` in `IssuingDistributionPointExtension` is a CHOICE and should not be encoded as IMPLICIT.

Please note that the parsing side (at https://github.com/openjdk/jdk/blob/a9db70418f7bc6b2f95afdd36a36024f865c04bf/src/java.base/share/classes/sun/security/x509/IssuingDistributionPointExtension.java#L195) is aware of this and has not called `resetTag()`.

-------------

Commit messages:
 - 8274330: Incorrect encoding of the DistributionPointName object in IssuingDistributionPointExtension

Changes: https://git.openjdk.java.net/jdk/pull/5706/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=5706&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8274330
  Stats: 52 lines in 2 files changed: 50 ins; 0 del; 2 mod
  Patch: https://git.openjdk.java.net/jdk/pull/5706.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/5706/head:pull/5706

PR: https://git.openjdk.java.net/jdk/pull/5706


More information about the security-dev mailing list