Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: P2
Fix Version/s: 6u18
Affects Version/s: 5.0, 6, 6u10
Component/s: security-libs
Labels:

Subcomponent:
java.security
Resolved In Build:
b02
CPU:

generic, x86
OS:

generic, linux, windows_xp, windows_7
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-2182427	7	Sean Mullan	P4	Resolved	Fixed	b73
JDK-2186834	OpenJDK6	Sean Mullan	P4	Resolved	Fixed	b18
JDK-2183987	5.0-pool	Abhijit Saha	P3	Closed	Won't Fix

Currently, it is not possible to check if a certificate is revoked without validating the entire certificate chain via the CertPath APIs. This is not acceptable especially if you have already validated the certificate chain, as many of the certificate chain validation checks (signature, issuer-name checking) are redundant and only need to be checked once. Additionally, you may only want to check if the end-entity certificate has been revoked, and not all the other certificates in the chain.

We need to implement a revocation checking mechanism that can check if a single certificate has been revoked. Initially we will focus on OCSP and add CRLs later.

backported by

JDK-2182427 Cannot check revocation of single certificate without validating the entire chain

Resolved

JDK-2186834 Cannot check revocation of single certificate without validating the entire chain

Resolved

JDK-2183987 Cannot check revocation of single certificate without validating the entire chain

Closed

duplicates

JDK-6712740 OCSP Responses not parsed correctly

Closed

JDK-6712739 OCSPChecker throws NPE when OPTIONAL "certs" missing from BasicOCSPResponse.

Closed

JDK-2165825 OCSP Responses not parsed correctly

Closed

JDK-6914458 Multiple OCSP Issues in the SUN provider: No support for 1..n of SingleResponse

Closed

relates to

JDK-6945145 PKIX path validation failed: App won't start when offline when using JOGL/Win7

Resolved

JDK-6878826 Add support for Extended Validation certificates

Closed

JDK-6885667 CertPath/CertPathValidatorTest/bugs/bug6383078 fails on jdk6u18/b02, jdk7/pit/b73 and passes on b72.

Resolved

JDK-6888769 Remove dependency on enums from internal sun.security.provider.certpath.OCSP API

Closed

(2 duplicates, 4 relates to)

Assignee:: Sean Mullan

Reporter:: Sean Mullan

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Created:: 2009-08-07 12:01

Updated:: 2012-06-08 11:26

Resolved:: 2010-01-13 15:35

Imported:: 16/Sep/12 2:23 AM

Indexed:: 17/Jul/12 10:23 PM

Details

Backports

Description

Attachments

Issue Links

Activity

People

Dates