JDK-6822460 : support self-issued certificate
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 6
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2009-03-26
  • Updated: 2010-09-29
  • Resolved: 2009-06-22
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6 JDK 7
6u18Fixed 7 b62Fixed
Description
a CA may issue a certificate to itself to support key rollover or changes in certificate policies. 

The SunJSSE validation looks for a self-signed cert with issuer.equals(subject), this is incorrect for self-issued certificate.

Need evaluation to support certificate chain that includes self-issued certificates.

Comments
EVALUATION J2ME need the update, should be addressed at JDK 7 and JDk 6 updates.
26-05-2009