The hookup dialog for cert that doesn't point to any OCSP/CRL info should a multiple click dialog with information "Unable to ensure the certificate used to identify this application has not been revoked". See attachment multi-click.png.
But now with jre8u20-b20 the dialog is a valid security dialog with title "Security Information".
Steps to reproduce:
0 Make sure OCSP/CRL check is enabled
1 Turn on trace in JCP
2 Import root self signed cert to jre/lib/security/cacerts to have a valid trusted cert:
keytool -import -file cacert.pem -keystore JRE_HOME/lib/security/cacerts -storepass changeit -alias cakey -noprompt
You can find the root self signed cert from http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/ocsplib/cacert.pem
3 Launch an app whose jar is singed with a cert which is using AIA extension as follows
AuthorityInfoAccess [
[
accessMethod: caIssuers
accessLocation: URIName:http://sc11b3034.us.oracle.com:8080/ocsp/CA/certs/cacert.pem
]
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/FXOcspAndCrlCheck/html/testOCSPAndCRLEnabledAIAOnlyCACert.html
4 If a dialog with title "Security Information" shows up instead of a security warning dialog with message "Unable to ensure the certificate used to identify this application has not been revoked", then bug is reproduced
But now with jre8u20-b20 the dialog is a valid security dialog with title "Security Information".
Steps to reproduce:
0 Make sure OCSP/CRL check is enabled
1 Turn on trace in JCP
2 Import root self signed cert to jre/lib/security/cacerts to have a valid trusted cert:
keytool -import -file cacert.pem -keystore JRE_HOME/lib/security/cacerts -storepass changeit -alias cakey -noprompt
You can find the root self signed cert from http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/ocsplib/cacert.pem
3 Launch an app whose jar is singed with a cert which is using AIA extension as follows
AuthorityInfoAccess [
[
accessMethod: caIssuers
accessLocation: URIName:http://sc11b3034.us.oracle.com:8080/ocsp/CA/certs/cacert.pem
]
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/FXOcspAndCrlCheck/html/testOCSPAndCRLEnabledAIAOnlyCACert.html
4 If a dialog with title "Security Information" shows up instead of a security warning dialog with message "Unable to ensure the certificate used to identify this application has not been revoked", then bug is reproduced