Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6787645

CRL validation code should permit some clock skew when checking validity of CRLs

    XMLWordPrintable

Details

    • b03
    • sparc
    • solaris_10

    Backports

      Description

        The CRL validation code should permit some clock skew when checking the validity
        of CRLs. Currently, the system clock and the CRL server's clock have to be exactly synchronized or the validity check may fail if the system's clock is skewed such that it
        is either before the CRL's this update field or after the CRL's next update field.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-2173406 CRL validation code should permit some clock skew when checking validity of CRLs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-6744888 OCSP validation code should permit some clock skew when checking validity of OCSP responses

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Activity

              People

                mullan Sean Mullan
                mullan Sean Mullan
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: