Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7049963

DISTINGUISHED NAMES FOR CERT ARE ESCAPED IN JROCKIT 1.6(NOT COMPATIBLE WITH JROC

XMLWordPrintable

    • b23
    • generic
    • generic
    • Verified

      SHORT SUMMARY:
      jrockit 1.6 behavior for repersenting DN for x509 cert is not compatible
        with jrockit 1.5.
      jrockit 1.6 introduces extract escape character.
        for e.g if CN = "Qpass Inc"

      INDICATORS:
      6.0 reflects this behaviour, versions previous to 5.0u29 has not reflected
      this behaviour

      COUNTER INDICATORS:
      Works well with versions below 5.0u29


      TRIGGERS:
      Bug # 6927152 - Escaped char. can not be set to CSR correctly by keytool in
      jdk5u22
      fixed in 6.0 and 5.0u29 onwards has reflected this behaviour.

      KNOWN WORKAROUND:
      NA

      PRESENT SINCE:
      jdk6-build17
      5.0u29

      HOW TO VERIFY:
      Customer has a test certificate, use keytool to print the certificate.
      5.0u22 does nto reflect this behaviour
      5.0u29 and 6.0 b17 onwards reflects this behaviour:

      C:\Program Files\Java\jre1.5.0_22\bin>.\keytool.exe -printcert -file
        "C:\Documents and Settings\smunozp\My Documents\SR\3-3211824371-
      Certificate
        Display\test.cer"
        Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
        OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
        Services Organization, OU="http://www.qpass.com"WARNING: THIS CERTIFICATE
        IS FOR TESTING ONLY!!!", OU=Qpass Quality Services Organization,
        OU="http://www.qpass.com", OU=Persona Not Validated, OU=Digital ID Class 1
      - Qpass Full Service, CN=Quality Services TEST ROOT CA,
        EMAILADDRESS=###@###.###

      C:\bea10.3.4\jdk160_21\jre\bin>.\keytool.exe -printcert -file "C:\Documents
        and Settings\smunozp\My Documents\SR\3-3211824371- Certificate
        Display\test.cer"
        Propietario: EMAILADDRESS=###@###.###, CN=q_cp1_application,
        OU="WARNING: THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality
        Services Organization, OU="\"http://www.qpass.com"", OU=Persona Not
        Validated, OU=Digital ID Class 1 - Qpass Full Service, O="\"Qpass Inc.\"",
        ST=Washington, C=US
        Emisor: C=US, ST=Washington, L=Seattle, O="\"Qpass Inc.\"", OU="WARNING:
        THIS CERTIFICATE IS FOR TESTING ONLY!!!", OU=Qpass Quality Services
        Organization, OU="\"http://www.qpass.com"", OU=Persona Not Validated,
        OU=Digital ID Class 1 - Qpass Full Service, CN=Quality Services TEST ROOT
        CA, EMAILADDRESS=###@###.###

      NOTES FOR SE:
      none

      REGRESSION:
      not a regression really, the behaviour needs to be modified

            mbankal Mala Bankal (Inactive)
            shadowbug Shadow Bug
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: