United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-8013228 Create new system properties to control allowable OCSP clock skew and CRL connection timeout
JDK-8013228 : Create new system properties to control allowable OCSP clock skew and CRL connection timeout

Details
Type:
Enhancement
Submit Date:
2013-04-25
Status:
Closed
Updated Date:
2013-12-17
Project Name:
JDK
Resolved Date:
2013-04-25
Component:
security-libs
OS:
Sub-Component:
java.security
CPU:
Priority:
P3
Resolution:
Fixed
Affected Versions:
7u25,8
Fixed Versions:

Related Reports
Backport:
Backport:
Backport:
Backport:

Sub Tasks

Description
Additional properties are needed to control certain aspects of certificate revocation checking. In particular, we need a property that allows a customer to adjust the maximum allowable clock skew when validating signed OCSP (On-line Certificate Staus Protocol) responses. Also, we need a property that allows a customer to adjust the maximum connection timeout when downloading CRLs (Certificate Revocation Lists).
                                    

Comments
Added noreq-sqe label. It is difficult to write a regression test for these properties. I will request SQE to add a new test.
                                     
2013-04-25
URL:   http://hg.openjdk.java.net/jdk8/deploy/jdk/rev/3e282678a885
User:  mullan
Date:  2013-04-25 19:49:38 +0000

                                     
2013-04-25
SQE ok.
                                     
2013-04-29
URL:   http://hg.openjdk.java.net/jdk8/jdk8/jdk/rev/3e282678a885
User:  ngthomas
Date:  2013-05-01 04:51:19 +0000

                                     
2013-05-01
Pending verification till INTJDK-7604036 is complete 
                                     
2013-06-28
INTJDK-7604036 have finished and  test passed.
                                     
2013-08-09



Hardware and Software, Engineered to Work Together