- 
    Bug 
- 
    Resolution: Fixed
- 
     P1 P1
- 
    8
- 
        b122
- 
        generic
- 
        generic
- 
        Verified
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build | 
|---|---|---|---|---|---|---|
| JDK-8030713 | 9 | Vincent Ryan | P1 | Closed | Fixed | b01 | 
| JDK-8031272 | 8u5 | Vincent Ryan | P1 | Resolved | Fixed | b03 | 
| JDK-8193962 | openjdk7u | Andrew Hughes | P1 | Resolved | Fixed | master | 
It appears to be a regression in JRE8-b119 as signed applet failed to load due to certificate validation failure.
The issue caused by java.lang.ClassCastException: com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl
The same applet loaded fine if using JRE8-b118
*** Tested Configurations
- x86 Win7
- IE 9, FF 25 ,GC 31
- jre 8-b118, b119
*** Steps to reproduce:
0) Install jre 8-b119
1) Enable the certificate revocation checks by default
2) Use any browser to load the signed test applet:
http://www.oxygenxml.com/demo/AuthorDemoApplet/author-component-dita.html
Wait for applet resources to download and at the end, if you see the certificate validation failed due to java.lang.ClassCastException: com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl, the issue is reproducible
The problem does not occur if using jre 8-b118
- backported by
- 
                    JDK-8031272 Certificate validation - java.lang.ClassCastException -           
- Resolved
 
-         
- 
                    JDK-8193962 Certificate validation - java.lang.ClassCastException -           
- Resolved
 
-         
- 
                    JDK-8030713 Certificate validation - java.lang.ClassCastException -           
- Closed
 
-         
- duplicates
- 
                    JDK-8030990 Cannot start applet signed with VeriSign certificate -           
- Closed
 
-         
- 
                    JDK-8030699 com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl -           
- Closed
 
-         
- relates to
- 
                    JDK-8015571 OCSP validation fails if ocsp.responderCertSubjectName is set -           
- Resolved
 
-         
             (1 relates to)