Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8297955

LDAP CertStore should use LdapName and not String for DNs

    XMLWordPrintable

Details

    • b13
    • Verified

    Backports

      Description

        The LDAPCertStore implementation passes Distinguished Names in CRL and Certificate URLs as Strings to JNDI APIs such as LdapContext.getAttributes(String), which then treats them as CompositeNames. This causes issues with URLs that have DNs with forward slashes as a forward slash is treated as a separation character in composite names. Instead, the implementation should be passing the DN to JNDI as an LdapName.

        An LDAP URL containing a forward slash in the Distinguished Name such as "ldap://host/cn=foo/123" is compliant with RFC 5280 and should be treated as an LdapName and not a composite name and should not be rejected.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8306287 LDAP CertStore should use LdapName and not String for DNs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8306288 LDAP CertStore should use LdapName and not String for DNs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8307337 LDAP CertStore should use LdapName and not String for DNs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8310851 LDAP CertStore should use LdapName and not String for DNs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8320823 LDAP CertStore should use LdapName and not String for DNs

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8289884 Actalis intermediate CA has invalid name in CRL DP

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8312126 NullPointerException in CertStore.getCRLs after 8297955

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            links to

            Commit Commit openjdk/jdk8u-dev/b2655a72

            Commit Commit openjdk/jdk11u-dev/7f1047ed

            Commit Commit openjdk/jdk17u-dev/96adf073

            Commit Commit openjdk/jdk/df9aad01

            Review Review openjdk/jdk8u-dev/388

            Review Review openjdk/jdk11u-dev/1975

            Review Review openjdk/jdk17u-dev/1303

            Review Review openjdk/jdk/12730

            Activity

              People

                mullan Sean Mullan
                mullan Sean Mullan
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: