Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6744888

OCSP validation code should permit some clock skew when checking validity of OCSP responses

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Fix
    • Icon: P2 P2
    • 6u11
    • 6u10
    • security-libs
    • None

        The OCSP validation code should permit some clock skew when checking the validity
        of OCSP responses. Currently, the system clock and the OCSP server clock have to
        be exactly synchronized or the following exception will be thrown:

                        throw new IOException("Response is unreliable: its validity " +
                            "interval is out-of-date");

              mullan Sean Mullan
              mullan Sean Mullan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: