Details
-
Bug
-
Resolution: Fixed
-
P2
-
8u5, 8u11, 8u20, 9
-
b15
-
Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8042229 | 9 | Andy Herrick | P2 | Resolved | Fixed | b15 |
JDK-8045025 | 8u25 | Andy Herrick | P2 | Resolved | Fixed | b01 |
JDK-8053118 | emb-8u26 | Andy Herrick | P2 | Resolved | Fixed | b17 |
JDK-8060567 | 7u80 | Andy Herrick | P2 | Resolved | Fixed | b03 |
JDK-8060309 | 7u76 | Andy Herrick | P2 | Resolved | Fixed | b04 |
JDK-8051371 | 7u75 | Andy Herrick | P2 | Resolved | Fixed | b01 |
JDK-8051488 | 7u72 | Andy Herrick | P2 | Resolved | Fixed | b05 |
JDK-8051438 | 7u71 | Andy Herrick | P2 | Closed | Fixed | b05 |
Description
When a signed extension is loaded after RDF has allowed the main app to run without dialog, and we see that the extension is signed by the same cert as the main app we allowed to run, we compare the base of the extension with the base stored in the extensions lap.
However, in most cases the base has been stored in the main app's lap, not the extensions base, so the compare fails and we show the extension dialog.
We should store both the cert fingerprint and the base together in the AC (just like we store both the cert and base in the CertStore when dialog is presented for main app), and then we need to compare base of extension with base stored in AC, not base stored in lap.
However, in most cases the base has been stored in the main app's lap, not the extensions base, so the compare fails and we show the extension dialog.
We should store both the cert fingerprint and the base together in the AC (just like we store both the cert and base in the CertStore when dialog is presented for main app), and then we need to compare base of extension with base stored in AC, not base stored in lap.
Attachments
Issue Links
- backported by
-
JDK-8042229 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8045025 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8051371 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8051488 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8053118 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8060309 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8060567 fix to JDK-8033756 is incomplete
- Resolved
-
JDK-8051438 fix to JDK-8033756 is incomplete
- Closed
(3 backported by)