OCSP validation code should permit some clock skew when checking validity of OCSP responses

XMLWordPrintable

    • Type: Bug
    • Resolution: Won't Fix
    • Priority: P2
    • 6u11
    • Affects Version/s: 6u10
    • Component/s: security-libs
    • None

        The OCSP validation code should permit some clock skew when checking the validity
        of OCSP responses. Currently, the system clock and the OCSP server clock have to
        be exactly synchronized or the following exception will be thrown:

                        throw new IOException("Response is unreliable: its validity " +
                            "interval is out-of-date");

              Assignee:
              Sean Mullan
              Reporter:
              Sean Mullan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: