The hookup dialog for cert that doesn't point to any ocsp/crl info in AIA extention is not correct

XMLWordPrintable

    • Type: Bug
    • Resolution: Cannot Reproduce
    • Priority: P3
    • 8u40
    • Affects Version/s: 8u20
    • Component/s: deploy
    • Environment:

      win7/x64/jre8u20-b20

      The hookup dialog for cert that doesn't point to any OCSP/CRL info should a multiple click dialog with information "Unable to ensure the certificate used to identify this application has not been revoked". See attachment multi-click.png.

      But now with jre8u20-b20 the dialog is a valid security dialog with title "Security Information".

      Steps to reproduce:
      0 Make sure OCSP/CRL check is enabled
      1 Turn on trace in JCP
      2 Import root self signed cert to jre/lib/security/cacerts to have a valid trusted cert:
            keytool -import -file cacert.pem -keystore JRE_HOME/lib/security/cacerts -storepass changeit -alias cakey -noprompt
            You can find the root self signed cert from http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/ocsplib/cacert.pem
      3 Launch an app whose jar is singed with a cert which is using AIA extension as follows
      AuthorityInfoAccess [
        [
         accessMethod: caIssuers
         accessLocation: URIName:http://sc11b3034.us.oracle.com:8080/ocsp/CA/certs/cacert.pem
        ]
      http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/FXOcspAndCrlCheck/html/testOCSPAndCRLEnabledAIAOnlyCACert.html

      4 If a dialog with title "Security Information" shows up instead of a security warning dialog with message "Unable to ensure the certificate used to identify this application has not been revoked", then bug is reproduced
       

            Assignee:
            Andy Herrick (Inactive)
            Reporter:
            Crystal Yang (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: