Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4044236

PKCS #7 OIDS incorrect ... code signing not interoperable

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P3 P3
    • 1.2.0
    • 1.1
    • security-libs
    • None
    • 1.2alpha2
    • generic
    • generic, solaris_2.5
    • Not verified

      I found a note on USENET from someone at IBM asking if the
      PKCS #7 OIDs were in fact wrong ... I checked, they sure seem
      to be wrong. In class sun.security.pkcs.ContentInfo:

          private static int[] pkcs7 = {1, 2, 840, 1113549, 1, 7};
          private static int[] data = {1, 2, 840, 1113549, 1, 7, 1};
          private static int[] sdata = {1, 2, 840, 1113549, 1, 7, 2};
          private static int[] edata = {1, 2, 840, 1113549, 1, 7, 3};
          private static int[] sedata = {1, 2, 840, 1113549, 1, 7, 4};
          private static int[] ddata = {1, 2, 840, 1113549, 1, 7, 5};
          private static int[] crdata = {1, 2, 840, 1113549, 1, 7, 6};

      Those "1113549" OIDs numbers should be "113549" instead (they have
      an extra "1" up front). It's clear that basic interop testing for
      this standard format didn't happen.

            hprafullsunw Hemlata Prafullchandra (Inactive)
            dbrownelsunw David Brownell (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: