Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7197247

To support internationalized domain name in SunJSSE

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P3 P3
    • None
    • 7
    • security-libs

      Need to support Internationalized Domain Names (IDN) in SunJSSE. Here is the known problems:
      1. Endentity identification and hostname verifier problem
         Mismatch occurs if the name (Subject or SubjectAltName) in X.509 certificate contains A-labels, while the hostname in URL is Unicode encoded, and vice versa.

      2. Interoperability issue for Server Name Indication (SNI) extension.
         RFC4366 allow UTF-8 hostname in SNI extension, while the revised RFC6066 only allows ASCII hostname. In JDK 7, if the target hostname in a URL is not ASCII compliant, servers follow RFC6066 may run into problems. We properly need to make improvement in JDK 7 to always sending ASCII hostname in SNI extension.

            hchao Haimay Chao
            xuelei Xuelei Fan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Imported:
              Indexed: