Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8042124

fix to JDK-8033756 is incomplete

XMLWordPrintable

    • b15
    • Verified

        When a signed extension is loaded after RDF has allowed the main app to run without dialog, and we see that the extension is signed by the same cert as the main app we allowed to run, we compare the base of the extension with the base stored in the extensions lap.
        However, in most cases the base has been stored in the main app's lap, not the extensions base, so the compare fails and we show the extension dialog.
        We should store both the cert fingerprint and the base together in the AC (just like we store both the cert and base in the CertStore when dialog is presented for main app), and then we need to compare base of extension with base stored in AC, not base stored in lap.

              herrick Andy Herrick (Inactive)
              herrick Andy Herrick (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: