Details
-
Enhancement
-
Resolution: Fixed
-
P3
-
7u25, 8
-
b88
-
Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8013710 | 7u45 | Sean Mullan | P3 | Closed | Fixed | b01 |
JDK-8013964 | 7u40 | Sean Mullan | P3 | Closed | Fixed | b30 |
JDK-8013374 | 7u25 | Thomas Ng | P3 | Closed | Fixed | b09 |
Description
Additional properties are needed to control certain aspects of certificate revocation checking. In particular, we need a property that allows a customer to adjust the maximum allowable clock skew when validating signed OCSP (On-line Certificate Staus Protocol) responses. Also, we need a property that allows a customer to adjust the maximum connection timeout when downloading CRLs (Certificate Revocation Lists).
Attachments
Issue Links
- backported by
-
JDK-8013374 Create new system properties to control allowable OCSP clock skew and CRL connection timeout
- Closed
-
JDK-8013710 Create new system properties to control allowable OCSP clock skew and CRL connection timeout
- Closed
-
JDK-8013964 Create new system properties to control allowable OCSP clock skew and CRL connection timeout
- Closed