PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: P4
    • 8
    • Affects Version/s: 7
    • Component/s: security-libs
    • None
    • b40
    • generic
    • generic
    • Verified

        I don't know how long this hasn't worked, but a PKIX CertPathBuilder in reverse mode (building from root to target) does not work if you specify more than one trust anchor in the PKIXBuilderParameters. You must only specify the correct trust anchor.

        This was probably never discovered because the reverse mode is not supported via the public API.

              Assignee:
              Xuelei Fan
              Reporter:
              Sean Mullan
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: