JDK-6878826 : Add support for Extended Validation certificates
  • Type: New Feature
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 7
  • Priority: P3
  • Status: Closed
  • Resolution: Won't Fix
  • OS: generic
  • CPU: generic
  • Submitted: 2009-09-03
  • Updated: 2021-12-13
  • Resolved: 2021-12-13
Related Reports
Relates :  
JDK-8046106 - JEP 116: Extended Validation SSL Certificates
Relates :  
JDK-6869739 - Cannot check revocation of single certificate without validating the entire chain
Description
We should investigate what is needed to fully support Extended Validation certificates in our SSL/TLS implementation. For example, we may want to enable revocation checking via OCSP by default (see 6869739) and add support for OCSP stapling (part of the TLS extensions RFC 3546) and perhaps new APIs and security dialogs that identify SSL/TLS connections that use EV certs.

See: http://cabforum.org/EV_Certificate_Guidelines_V11.pdf (GUIDELINES FOR THE ISSUANCE AND MANAGEMENT OF EXTENDED VALIDATION CERTIFICATES) for more specific information on EV certs.