Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8049020

The hookup dialog for cert that doesn't point to any ocsp/crl info in AIA extention is not correct

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P3 P3
    • 8u40
    • 8u20
    • deploy
    • win7/x64/jre8u20-b20

      The hookup dialog for cert that doesn't point to any OCSP/CRL info should a multiple click dialog with information "Unable to ensure the certificate used to identify this application has not been revoked". See attachment multi-click.png.

      But now with jre8u20-b20 the dialog is a valid security dialog with title "Security Information".

      Steps to reproduce:
      0 Make sure OCSP/CRL check is enabled
      1 Turn on trace in JCP
      2 Import root self signed cert to jre/lib/security/cacerts to have a valid trusted cert:
            keytool -import -file cacert.pem -keystore JRE_HOME/lib/security/cacerts -storepass changeit -alias cakey -noprompt
            You can find the root self signed cert from http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/ocsplib/cacert.pem
      3 Launch an app whose jar is singed with a cert which is using AIA extension as follows
      AuthorityInfoAccess [
        [
         accessMethod: caIssuers
         accessLocation: URIName:http://sc11b3034.us.oracle.com:8080/ocsp/CA/certs/cacert.pem
        ]
      http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/FXOcspAndCrlCheck/html/testOCSPAndCRLEnabledAIAOnlyCACert.html

      4 If a dialog with title "Security Information" shows up instead of a security warning dialog with message "Unable to ensure the certificate used to identify this application has not been revoked", then bug is reproduced
       

            herrick Andy Herrick (Inactive)
            wenjyang Crystal Yang (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: