JDK-5072953 : AuthorityInfoAccess certificate extension is being ignored.
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 5.0
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2004-07-12
  • Updated: 2012-10-09
  • Resolved: 2004-09-10
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Other JDK 6
5.0u1 01Fixed 6Fixed
Description
In J2SE v 1.5, the revocation status of a public key certificate can be 
checked by means of OCSP (RFC 2560). The certificate being checked may 
be pre-configured to use a particular OCSP Responder. The responder is
identified by a URL in the certificate's AuthorityInfoAccess (AIA)
extension. That AIA extension is currently being ignored. The result
is that pre-configured certificates cannot be checked correctly.
Comments
CONVERTED DATA BugTraq+ Release Management Values COMMIT TO FIX: 1.5.0_01 mustang FIXED IN: 1.5.0_01 mustang INTEGRATED IN: 1.5.0_01 mustang
15-09-2004
EVALUATION Fix as suggested.
15-09-2004
SUGGESTED FIX Modify the parsing code in the OCSP class to correctly process the AIA extension.
15-09-2004