Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4479283

Unknown revocation reasons aren't handled well

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P3
    • 1.3.1_10
    • 1.3.1_07, 1.4.0
    • security-libs
    • None
    • 10
    • generic, sparc
    • generic, solaris_8
    • Verified

    Backports

      Description

        CRLReasonCodeExtension throws an exception if it encounters an unrecognized reason code. This is not compliant with X.509 or the latest PKIX specs (as noted in Appendix B of draft-ietf-pkix-new-part1-07.txt), which say that unrecognized revocation reason codes should be ignored.

        Because of this behavior, our PKIX CertPathVerifier and CertPathBuilder are not strictly PKIX compliant. In fact, they reject any CRL that contains one of the new reason codes added to X.509(2000) and draft-ietf-pkix-new-part1-07.txt: privilegeWithdrawn and aACompromise.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-2045306 Unknown revocation reasons aren't handled well

            • P3 - Major loss of function.
            • Resolved
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-4908982 sun.security.x509.CRLExtensions failure for parsing the CRL with reason code 9

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed
            relates to

            Enhancement - null JDK-4479530 New revocation reasons should be supported

            • P3 - Major loss of function.
            • Resolved

            Activity

              People

                andreas Andreas Sterbenz
                duke J. Duke
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: