-
Bug
-
Resolution: Fixed
-
P3
-
7u10
-
b08
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8018739 | 7u45 | Vincent Ryan | P3 | Closed | Fixed | b01 |
PKIX certpath validation is normally performed using the current time.
It may also be requested to be performed at a specific time.
When validating a certpath using a specified time then the OCSP response
shall be checked using that time, rather than using the current time.
Specifically, the specified time should be used when validating the
OCSP response's thisUpdate and nextUpdate, rather than the current time.
It may also be requested to be performed at a specific time.
When validating a certpath using a specified time then the OCSP response
shall be checked using that time, rather than using the current time.
Specifically, the specified time should be used when validating the
OCSP response's thisUpdate and nextUpdate, rather than the current time.
- backported by
-
JDK-8018739 Time-specific certpath validation applies to OCSP response validity period
- Closed
- relates to
-
JDK-8020940 Valid OCSP responses are rejected for backdated enquiries
- Closed