[7u] code review request: 8014805: NPE is thrown during certpath validation if certificate does not have AuthorityKeyIdentifier extension

Vincent Ryan vincent.x.ryan at oracle.com
Fri Jun 21 08:46:42 PDT 2013


Please review this fix for 7u:

http://cr.openjdk.java.net/~vinnie/8014805/webrev.00/
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=8014805

It corrects the NPE that occurs when verifying an X.509 cert that has an Authority Key ID extension
present but it is not in the hash-based format.

This problem does not occur in JDK 8.

Thanks.


More information about the security-dev mailing list