-
Bug
-
Resolution: Fixed
-
P2
-
6u24
-
b23
-
generic
-
generic
-
Verified
SHORT SUMMARY:
jrockit 1.6 behavior for repersenting DN for x509 cert is not compatible
with jrockit 1.5.
jrockit 1.6 introduces extract escape character.
for e.g if CN = "Qpass Inc"
INDICATORS:
6.0 reflects this behaviour, versions previous to 5.0u29 has not reflected
this behaviour
COUNTER INDICATORS:
Works well with versions below 5.0u29
TRIGGERS:
Bug # 6927152 - Escaped char. can not be set to CSR correctly by keytool in
jdk5u22
fixed in 6.0 and 5.0u29 onwards has reflected this behaviour.
KNOWN WORKAROUND:
NA
PRESENT SINCE:
jdk6-build17
5.0u29
HOW TO VERIFY:
Customer has a test certificate, use keytool to print the certificate.
5.0u22 does nto reflect this behaviour
5.0u29 and 6.0 b17 onwards reflects this behaviour:
C:\Program Files\Java\jre1.5.0_22\bin>.\keytool.exe -printcert -file
"C:\Documents and Settings\smunozp\My Documents\SR\3-3211824371-
Certificate
Display\test.cer"
Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
Services Organization, OU="http://www.qpass.com"WARNING: THIS CERTIFICATE
IS FOR TESTING ONLY!!!", OU=Qpass Quality Services Organization,
OU="http://www.qpass.com", OU=Persona Not Validated, OU=Digital ID Class 1
- Qpass Full Service, CN=Quality Services TEST ROOT CA,
EMAILADDRESS=###@###.###
C:\bea10.3.4\jdk160_21\jre\bin>.\keytool.exe -printcert -file "C:\Documents
and Settings\smunozp\My Documents\SR\3-3211824371- Certificate
Display\test.cer"
Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
Services Organization, OU="\"http://www.qpass.com"", OU=Persona Not
Validated, OU=Digital ID Class 1 - Qpass Full Service, O="\"Qpass Inc.\"",
ST=Washington, C=US
Emisor: C=US, ST=Washington, L=Seattle, O="\"Qpass Inc.\"", OU="WARNING:
THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality Services
Organization, OU="\"http://www.qpass.com"", OU=Persona Not Validated,
OU=Digital ID Class 1 - Qpass Full Service, CN=Quality Services TEST ROOT
CA, EMAILADDRESS=###@###.###
NOTES FOR SE:
none
REGRESSION:
not a regression really, the behaviour needs to be modified
jrockit 1.6 behavior for repersenting DN for x509 cert is not compatible
with jrockit 1.5.
jrockit 1.6 introduces extract escape character.
for e.g if CN = "Qpass Inc"
INDICATORS:
6.0 reflects this behaviour, versions previous to 5.0u29 has not reflected
this behaviour
COUNTER INDICATORS:
Works well with versions below 5.0u29
TRIGGERS:
Bug # 6927152 - Escaped char. can not be set to CSR correctly by keytool in
jdk5u22
fixed in 6.0 and 5.0u29 onwards has reflected this behaviour.
KNOWN WORKAROUND:
NA
PRESENT SINCE:
jdk6-build17
5.0u29
HOW TO VERIFY:
Customer has a test certificate, use keytool to print the certificate.
5.0u22 does nto reflect this behaviour
5.0u29 and 6.0 b17 onwards reflects this behaviour:
C:\Program Files\Java\jre1.5.0_22\bin>.\keytool.exe -printcert -file
"C:\Documents and Settings\smunozp\My Documents\SR\3-3211824371-
Certificate
Display\test.cer"
Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
Services Organization, OU="http://www.qpass.com"WARNING: THIS CERTIFICATE
IS FOR TESTING ONLY!!!", OU=Qpass Quality Services Organization,
OU="http://www.qpass.com", OU=Persona Not Validated, OU=Digital ID Class 1
- Qpass Full Service, CN=Quality Services TEST ROOT CA,
EMAILADDRESS=###@###.###
C:\bea10.3.4\jdk160_21\jre\bin>.\keytool.exe -printcert -file "C:\Documents
and Settings\smunozp\My Documents\SR\3-3211824371- Certificate
Display\test.cer"
Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
Services Organization, OU="\"http://www.qpass.com"", OU=Persona Not
Validated, OU=Digital ID Class 1 - Qpass Full Service, O="\"Qpass Inc.\"",
ST=Washington, C=US
Emisor: C=US, ST=Washington, L=Seattle, O="\"Qpass Inc.\"", OU="WARNING:
THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality Services
Organization, OU="\"http://www.qpass.com"", OU=Persona Not Validated,
OU=Digital ID Class 1 - Qpass Full Service, CN=Quality Services TEST ROOT
CA, EMAILADDRESS=###@###.###
NOTES FOR SE:
none
REGRESSION:
not a regression really, the behaviour needs to be modified
- relates to
-
JDK-7074598 javax/security/auth/x500/X500Principal/Parse.java test issue on jdk6
- Closed